<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2185">
<package pkgid="0368f349fe8e816b17ff6acc7b23d1dc1005654a7b30d0e1d70c8df8b381a614" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="74ab063994a334c92a80c7a9dfbfcc56824a20e07324e72a6a8749b27186ab35" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="10d9e56cef39561bc571393719dcc20e00dff6816ac281ddaccbf6450813fc90" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="438c7f3afee143fced09d054c2e05319ea90dd682d6bb3b3881fd20180eb4784" name="389-ds" arch="src">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="7b8236668af17a24a911b74a12789bacc4ddf32b8fb2abeb481759ef0a4505f9" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="b036e38d8fef144bfc9d31f87f9e334e100dd3d57cded5c344140857d68dc697" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="7f9d66e0388c5523d9c9a9ad6b94b73d5e2265da179c9fd3182b1f4d1ba3be77" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="f2fae075c0d6670eca4273f298d64da145f872b3204c85884bb3c76312f21b44" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="fadd3fca1038747162f001095b1935d6c0eba834f39248e540f8e99f86d221d0" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="dac681f057dd17ebe044ffcd71b89b00d6aae6d0a05f118ec21b430d5717b6f8" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="619a7b637daba6d951bf78ef4010f62afa54b930860f2b647586268854e9a60b" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="afef0c94fc40cacffd96a9d7bacdfe57bd3c36da4b150855dca82fb6d5dc2bfe" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="8a70393192618581a8431af780dff751fa1decc8f9cf8694736b48c64dbe1035" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="dc9a15c71a90d0666d09766034e3b2fb0ac7ef144ac088f7c2b2b37169eecdd9" name="HANA-Firewall" arch="ppc64le">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="8b53ff293f23bcf3fbb1bed0f5435c971b581b964ee571c4ffbeb7fab48d7f4b" name="HANA-Firewall" arch="src">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="58763b5397666c5ab986d7c13f57f971e2129d71c08c52ac07580b9e1cc57088" name="HANA-Firewall" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="150000.3.9.3"/>
  <changelog author="varkoly@suse.com" date="1426161600">- Initial Version of HANA-Firewall</changelog>
  <changelog author="hguo@suse.com" date="1443787200">- Bring HANA-Firewall out of technical preview with feature
  enhancements and major code clean-up.</changelog>
  <changelog author="varkoly@suse.com" date="1444132800">- Fix names in sysconfig file</changelog>
  <changelog author="hguo@suse.com" date="1445428800">- Remove unnecesary defaults from sysconfig.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Fully integrate with SUSE firewall.</changelog>
  <changelog author="hguo@suse.com" date="1446724800">- Add missing changelog macro in spec file.</changelog>
  <changelog author="hguo@suse.com" date="1464955200">- Improve prompts in create_new_service.
- Relax file permissions in hana-firewall.d directory.
- Fix result file location for create_new_service.
- fate#320564 fate#320376</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Fix typo and incorrectly assigned default value in sysconfig file.
  Bump version to 1.1.2. (bsc#991919)</changelog>
  <changelog author="hguo@suse.com" date="1470398400">- Add several more TCP ports that are vital to HA operation into
  firewall service definition file.
  Bump version to 1.1.3 (bsc#992376)</changelog>
  <changelog author="hguo@suse.com" date="1475755200">- Merge HANA firewall rules into an existing "customrules" script
  if it is present.
- Bump version to 1.1.4 (bsc#1002744);</changelog>
  <changelog author="hguo@suse.com" date="1508328000">- Upgrade to upstream version 2.0 to work with firewalld in SLES 15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hguo@suse.com" date="1518436800">- Upgrade to upstream version 2.0.1 to improve visibility of HANA
  related firewall services in firewalld configuration tool.
  (bsc#1080597)</changelog>
  <changelog author="abriel@suse.com" date="1648641600">- Adaption to new go compiler behavior regarding test and build
  (bsc#1197697)</changelog>
  <changelog author="varkoly@suse.com" date="1683028800">- Missing SCR Agent for reading and writing /etc/sysconfig/hana-firewall from yast2
  (bsc#1210981)</changelog>
  <changelog author="varkoly@suse.com" date="1715083200">- HANA-Firewall creates insufficient configuration.
  (bsc#1221231)</changelog>
</package>
<package pkgid="1a426f997cc0168ecb250364fa6604b47bcd0564f029c7a96afae394fe72025d" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="10c3b0c8f2f597d6580a54a4adda9bf9ac011410a30476be5929ab8d4453cdc4" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="139d13b84200eaf590a3950ad9c9edb2f585822b6b582f183465546e1820c4c6" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="f76af917fc4c70f5236b36bf156fb77aa60f71407d84ceb877cd21fc0029dc13" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="0647d6b6c26df1d92782e8063ff2efc261af7cb22923d6c7a0a57b709df0ef22" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="33ea4eb4ab51cc90961ae963eecaa892187ec3eb943cbba95496a29cb3eb8194" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="611d3b156fa58af24da069e971d39665eb79babaae1c3b4e0370817f46f85946" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="91a543f88528f1d35ce378cdc6ce8d23d92958dced46de37bfe9a9c20898a3e7" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="7d54e5f452aad714cff64be8a5b8b7582877467dea14909f1a19a4a11baaeb8a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="2df986d3c29663c63bd844266742980a304098879109557029c5babd872af10e" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="b619db515a9f17f66bf0c897a81b3ccd1c3f19f03254f7f8ee754a53c2251b32" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="72e8de1214271dd63914b16455ab6e8fc8a6eee7b449ec230a077114e5ad023c" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="38c9b6cec1929bfa81e25b6d12eeaa6405027a5b92ea1f392a40f4762f7a59c7" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="4c7daf43b9dd430d737a5c2564e8c985a72dfb4c5564f57d40a9f21888768b0a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="4b59cc95780769fb8004993d76d4b853b43058adf680257674f06340823508fd" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="bfb9fea274045ed018f8019213803cc79fca5d309e94dcd31e7cba0ed1afe0dd" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="82df70694865d0df0a215345b32d14bdbd5c036deb02592a79a9be0fc93e503f" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="08c7580f7f4800d5f75ca922eca9e9b480814c47d7c5a7db0c22d1daa91cc349" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.152.137.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-30 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692964800">- Firefox Extended Support Release 115.2.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-36 (bsc#1214606)
  * CVE-2023-4574: (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575: (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576: (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577: (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051: (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578: (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
  * CVE-2023-4053: (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580: (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581: (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582: (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583: (bmo#1842030)
    Browsing Context potentially not cleared when closing Private Window
  * CVE-2023-4584: (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585: (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694174400">- Fix i586 build by reducing debug info to -g1. (boo#1210168)</changelog>
  <changelog author="cgrobertson@suse.com" date="1694520000">- Firefox Extended Support Release 115.2.1 ESR
  * Fixed: Security fix
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863 (bmo#1852649)
    Heap buffer overflow in libwebp</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1695297600">- Firefox Extended Support Release 115.3.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-42 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)</changelog>
  <changelog author="meissner@suse.com" date="1695988800">- Firefox Extended Support Release 115.3.1 ESR
  * Fixed: Security fix.
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697544000">- Firefox Extended Support Release 115.4.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-46 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700136000">- Firefox Extended Support Release 115.5.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-50 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702382400">- Firefox Extended Support Release 115.6.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-54 (bsc#1217974)
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6865 (bmo#1864123)
    Potential exposure of uninitialized data in
    EncryptingOutputStream
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6867 (bmo#1863863)
    Clickjacking permission prompts using the popup transition
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1705579200">- Firefox Extended Support Release 115.7.0 ESR
  * Fixed: Various security fixes and other quality improvements.
- Mozilla Firefox ESR 115.7
  MFSA 2024-02 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706616000">- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- Firefox Extended Support Release 115.8.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-06 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710331200">- Firefox Extended Support Release 115.9.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-13 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1711108800">- Firefox Extended Support Release 115.9.1esr ESR
  * Fixed: Security fix.
  MFSA 2024-16 (bsc#1221850)
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712664000">- Firefox Extended Support Release 115.10.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2024-19 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715169600">- Firefox Extended Support Release 115.11.0 ESR
  Placeholder changelog-entry (bsc#1224056)</changelog>
</package>
<package pkgid="440ab4d47fb8d6b106da36b59ad4c2cf18d39264007bcafa6e170450b35f8049" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="2785706ed159bd4a84889ab37e9879c68b9cb74d392040c9a1c767c725198f5e" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="ac60e564668ea51fb5d84baacd67bab08ff315d1dc707489d05400cd08601937" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="edfaa2767cdae9e9b162e73263517d8dc08317fc6db149703dab25f2de08640c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="c72d621dda3b060679acc7ffd2858ebfa85d9f5039690432a6658b2139db9431" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="3f44fe92325e27326e5e5381e9793704c716bfa8f458b79bb0daae3a64c81036" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="c74846b309e7faeca7d7743a7f5ee0ce82732e25595a473db5bf587eca2d0388" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="64076a3397953ca826ab59864999dfff79de447bb7df77f46efaa56c922602ca" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="ad20d9314a9fe71c53998a8c7c5211ac74a4a5c2c13c1f02f2c324d28a114f61" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="410455ed2f22d520e132a09c5e0f65804672b4ba91db8c56f72dc37158a2ec81" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="3c2d5385fde8267598bfabbfd77c39c9839eb3b9cde31590ea27fedd3b896bbe" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="135596aeb4fc2f8ba38e4b3b088da3491f867bce10179a3f5101eb637800e33b" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="d8fb293e575a312d6ab96fcbca0cfc2c51dd12fe82bbb33c870adc29b98e787c" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="115.11.0" rel="150200.8.160.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690977600">- Mozilla Thunderbird 115.1.0
  * changed: Quick Filter bar is now hidden by default
    (bmo#1835685)
  * changed: Mail tab toolbar and Unified toolbar heights
    adjusted to be more consistent (bmo#1843804,bmo#1845500)
  * fixed: Message-ID header used account domain instead of
    "From" field domain (bmo#1727181)
  * fixed: Zooming did not work in multi-message view
    (bmo#1839006)
  * fixed: "Clear Recent History" dialog did not resize correctly
    to fit content (bmo#1843233)
  * fixed: Tooltip containing full message title did not appear
    when hovering over message in card view (bmo#1843188)
  * fixed: Message List column headers became transparent in
    increased contrast mode (bmo#1842893)
  * fixed: Message List card padding was incorrect in compact
    view (bmo#1843480)
  * fixed: Total message counts and folder sizes were also hidden
    when "Hide Local Folders" was selected in Folder Pane options
    (bmo#1843135)
  * fixed: Messages in deeply nested IMAP folders were
    inaccessible (bmo#1843637)
  * fixed: Thunderbird Flatpak could not be executed from
    terminal using command "thunderbird" (bmo#1843051)
  * fixed: CardDAV address book dialog did not resize properly to
    show all available address books (bmo#1836214)
  * fixed: Various visual and style fixes
    (bmo#1843459,bmo#1844763,bmo#1838519)
  MFSA 2023-33 (bsc#1213746)
  * CVE-2023-4045 (bmo#1833876)
    Offscreen Canvas could have bypassed cross-origin
    restrictions
  * CVE-2023-4046 (bmo#1837686)
    Incorrect value used during WASM compilation
  * CVE-2023-4047 (bmo#1839073)
    Potential permissions request bypass via clickjacking
  * CVE-2023-4048 (bmo#1841368)
    Crash in DOMParser due to out-of-memory conditions
  * CVE-2023-4049 (bmo#1842658)
    Fix potential race conditions when releasing platform objects
  * CVE-2023-4050 (bmo#1843038)
    Stack buffer overflow in StorageManager
  * CVE-2023-4052 (bmo#1824420)
    File deletion and privilege escalation through Firefox
    uninstaller
  * CVE-2023-4054 (bmo#1840777)
    Lack of warning when opening appref-ms files
  * CVE-2023-4055 (bmo#1782561)
    Cookie jar overflow caused unexpected cookie jar state
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
    bmo#1842325, bmo#1843847)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  * CVE-2023-4057 (bmo#1841682)
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
    and Thunderbird 115.1
- Remove now upstreamed patch mozilla-bmo1775202.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1692273600">- Mozilla Thunderbird 115.1.1
  * fixed: Some HTML emails printed headers on first page and
    message on subsequent pages (bmo#1843628)
  * fixed: Deleting messages from message list sometimes scrolled
    list to bottom, selecting bottommost message (bmo#1835173)
  * fixed: Width of icon columns (like Junk or Starred) in
    message list did not adjust when UI density was changed
    (bmo#1843014)
  * fixed: Old OpenPGP secret keys could not be used to decrypt
    messages under certain circumstances (bmo#1835786)
  * fixed: When multiple folder modes were active, tab focus
    navigated through all folder mode options before reaching
    message list (bmo#1842060)
  * fixed: Unread message count badge was not displayed on parent
    folders of subfolder containing unread messages (bmo#1844534)
  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
    previously archived messages (bmo#1829340)
  * fixed: "New" button dropdown menu in "Message Filters" dialog
    could not be opened via keyboard navigation (bmo#1843511)
  * fixed: "Show New Mail Alert for" input field in "Customize
    New Mail Alert" dialog had zero width when using certain
    language packs (bmo#1845832)
  * fixed: "Account Wizard" dialog was too narrow when adding a
    news server, partially hiding confirmation buttons
    (bmo#1846588)
  * fixed: Link Properties and Image Properties dialogs in the
    composer were too wide (bmo#1816850)
  * fixed: Thunderbird version number and details in "About"
    dialog were not automatically read by screen readers when
    first opening dialog (bmo#1847078)
  * fixed: Flatpak improvements and bug fixes
    (bmo#1825399,bmo#1843094,bmo#1843097)
  * fixed: Various visual and UX improvements (bmo#1846262)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694606400">- Mozilla Thunderbird 115.2.2
  * fixed: Security fixes
  MFSA 2023-40 (bsc#1215245)
  * CVE-2023-4863
    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
    bmo#1852649)
    Heap buffer overflow in libwebp
- Mozilla Thunderbird 115.2.1
  * new: Column separators are now shown between all columns in
    tree view (bmo#1847441)
  * fixed: Crash reporter did not work in Thunderbird Flatpak
    (bmo#1843102)
  * fixed: New mail notification always opened message in message
    pane, even if pane was disabled (bmo#1840092)
  * fixed: After moving an IMAP message to another folder, the
    incorrect message was selected in the message list
    (bmo#1845376)
  * fixed: Adding a tag to an IMAP message opened in a tab failed
    (bmo#1844452)
  * fixed: Junk/Spam folders were not always shown in Unified
    Folders mode (bmo#1838672)
  * fixed: Middle-clicking a folder or message did not open it in
    a background tab, as in previous versions (bmo#1842482)
  * fixed: Settings tab visual improvements: Advanced Fonts
    dialog, Section headers hidden behind search box
    (bmo#1717382,bmo#1846751)
  * fixed: Various visual and style fixes
    (bmo#1843707,bmo#1849823)
- Mozilla Thunderbird 115.2
  * new: Thunderbird MSIX packages are now published on
    archive.mozilla.org (bmo#1817657)
  * changed: Size, Unread, and Total columns are now right-
    aligned (bmo#1848604)
  * changed: Newsgroup names in message list header are now
    abbreviated (bmo#1833298)
  * fixed: Message compose window did not apply theme colors to
    menus (bmo#1845699)
  * fixed: Reading the second new message in a folder cleared the
    unread indicator of all other new messages (bmo#1839805)
  * fixed: Displayed counts of unread or flagged messages could
    become out-of-sync (bmo#1846860)
  * fixed: Deleting a message from the context menu with messages
    sorted in chronological order and smooth scroll enabled
    caused message list to scroll to top (bmo#1843462)
  * fixed: Repeatedly switching accounts in Subscribe dialog
    caused tree view to stop updating (bmo#1845593)
  * fixed: "Ignore thread" caused message cards to display
    incorrectly in message list (bmo#1847966)
  * fixed: Creating tags from unified toolbar failed
    (bmo#1846336)
  * fixed: Cross-folder navigation using F and N did not work
    (bmo#1845011)
  * fixed: Account Manager did not resize to fit content, causing
    "Close" button to become hidden outside bounds of dialog when
    too many accounts were listed (bmo#1847555)
  * fixed: Remote content exceptions could not be added in
    Settings (bmo#1847576)
  * fixed: Newsgroup list file did not get updated after adding a
    new NNTP server (bmo#1845464)
  * fixed: "Download all headers" option in NNTP "Download
    Headers" dialog was incorrectly selected by default
    (bmo#1845457)
  * fixed: "Convert to event/task" was missing from mail context
    menu (bmo#1817705)
  * fixed: Events and tasks were not shown in some cases despite
    being present on remote server (bmo#1827100)
  * fixed: Various visual and UX improvements
    (bmo#1844244,bmo#1845645)
  * fixed: Security fixes
  MFSA 2023-38 (bsc#1214606)
  * CVE-2023-4573 (bmo#1846687)
    Memory corruption in IPC CanvasTranslator
  * CVE-2023-4574 (bmo#1846688)
    Memory corruption in IPC ColorPickerShownCallback
  * CVE-2023-4575 (bmo#1846689)
    Memory corruption in IPC FilePickerShownCallback
  * CVE-2023-4576 (bmo#1846694)
    Integer Overflow in RecordedSourceSurfaceCreation
  * CVE-2023-4577 (bmo#1847397)
    Memory corruption in JIT UpdateRegExpStatics
  * CVE-2023-4051 (bmo#1821884)
    Full screen notification obscured by file open dialog
  * CVE-2023-4578 (bmo#1839007)
    Error reporting methods in SpiderMonkey could have triggered
    an Out of Memory Exception
  * CVE-2023-4053 (bmo#1839079)
    Full screen notification obscured by external program
  * CVE-2023-4580 (bmo#1843046)
    Push notifications saved to disk unencrypted
  * CVE-2023-4581 (bmo#1843758)
    XLL file extensions were downloadable without warnings
  * CVE-2023-4582 (bmo#1773874)
    Buffer Overflow in WebGL glGetProgramiv
  * CVE-2023-4583 (bmo#1842030)
    Browsing Context potentially not cleared when closing Private
    Window
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
    bmo#1846526, bmo#1847529)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
    bmo#1847904, bmo#1848999)
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
    and Thunderbird 115.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1696248000">- Mozilla Thunderbird 115.3.1
  * fixed: In Unified Folders view, some folders had incorrect
    unified folder parent (bmo#1852525)
  * fixed: "Edit message as new" did not restore encrypted
    subject from selected message (bmo#1788534)
  * fixed: Importing some CalDAV calendars with yearly recurrence
    events caused Thunderbird to freeze (bmo#1850732)
  * fixed: Security fixes
  MFSA 2023-44 (bsc#1215814)
  * CVE-2023-5217 (bmo#1855550)
    Heap buffer overflow in libvpx
- Mozilla Thunderbird 115.3
  * fixed: Thunderbird could not import profiles with hostname
    ending in dot (".") (bmo#1825374)
  * fixed: Message header was occasionally missing in message
    preview (bmo#1840943)
  * fixed: Setting an existing folder's type flag did not add
    descendant folders to the Unified Folders view (bmo#1848904)
  * fixed: Thunderbird did not always delete all temporary mail
    files, sometimes preventing messages from being sent
    (bmo#673703)
  * fixed: Status bar in Message Compose window could not be
    hidden (bmo#1806860)
  * fixed: Message header was intermittently missing from message
    preview (bmo#1840943)
  * fixed: OAuth2 did not work on some profiles created in
    Thunderbird 102.6.1 or earlier (bmo#1814823)
  * fixed: In Vertical View, decrypted subject lines were
    displayed as ellipsis ("...") in message list (bmo#1831764)
  * fixed: Condensed address preference
    (mail.showCondensedAddresses) did not show condensed
    addresses in message list (bmo#1831280)
  * fixed: Spam folder could not be assigned non-ASCII names with
    IMAP UTF-8 enabled (bmo#1816332)
  * fixed: Message header was not displayed until images finished
    loading, causing noticeable delay for messages containing
    large images (bmo#1851871)
  * fixed: Large SVG favicons did not display on RSS feeds
    (bmo#1853895)
  * fixed: Context menu items did not display a hover background
    color (bmo#1852732)
  * fixed: Security fixes
  MFSA 2023-43 (bsc#1215575)
  * CVE-2023-5168 (bmo#1846683)
    Out-of-bounds write in FilterNodeD2D1
  * CVE-2023-5169 (bmo#1846685)
    Out-of-bounds write in PathOps
  * CVE-2023-5171 (bmo#1851599)
    Use-after-free in Ion Compiler
  * CVE-2023-5174 (bmo#1848454)
    Double-free in process spawning on Windows
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824,
    bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983,
    bmo#1851195)
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
    and Thunderbird 115.3
- Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build
  with newer binutils (bsc#1215309)
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
- Mozilla Thunderbird 115.2.3
  * changed: Card view and vertical layout are now default for
    new profiles (bmo#1849000)
  * fixed: Go &gt; Folder menu was disabled (bmo#1849919)
  * fixed: "Tools" menu was blank when opened from compose window
    on macOS (bmo#1848155)
  * fixed: Deleting an attachment from a message on an IMAP
    server corrupted the local copy when configured with "mark as
    deleted" (bmo#1135434)
  * fixed: Manually entered passwords were not remembered for
    OAuth-authenticated accounts such as Yahoo mail (bmo#1673446)
  * fixed: Quick Filter's "Keep filters applied" did not persist
    after restarting Thunderbird (bmo#1846880,bmo#1849221)
  * fixed: Top-level Quick Filter settings did not persist after
    restart (bmo#1849249)
  * fixed: Notifications for new messages with non-ASCII
    characters in the subject were garbled (bmo#1842384)
  * fixed: "Mark Thread As Read" did not work when some messages
    in thread were already read (bmo#1850850)
  * fixed: New Groups tab in NNTP subscribe dialog id not work as
    expected (bmo#1848366)
  * fixed: Negative values were allowed in "Share for files
    larger than" field (bmo#1850281)
  * fixed: Thunderbird sometimes crashed when deleting a parent
    folder with subfolders (bmo#1851293)
  * fixed: "Send Message Error" appeared intermittently while
    Thunderbird was idle (bmo#1801668)
  * fixed: Focused but not selected messages were missing visual
    indication of focus in card view (bmo#1844263)
  * fixed: Notification dot did not disappear from taskbar icon
    on Windows after messages had already been read (bmo#1824889)
  * fixed: Multiple selected messages could not be opened
    simultaneously if selection included more than 19 messages
    (bmo#1851563)
  * fixed: Email replies received via BCC incorrectly populated
    From field with default identity (bmo#1851512)
  * fixed: User was not always notified of message send failures
    in outbox (bmo#1851542)
  * fixed: Tag dialog did not close properly after editing tag
    (bmo#1852414)
  * fixed: Newsgroup field in compose window did not autocomplete
    with suggested newsgroup names (bmo#1670457)
  * fixed: Canceling newsgroup messages did not check if sender
    matched user's own identity (bmo#1823274)
  * fixed: Event dialog with several invitees expanded beyond
    screen height (bmo#1848261)
  * fixed: Message check boxes were partially obstructed in
    message list (bmo#1850760)
  * unresolved: Some folders missing from Unified Folders ()</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1697457600">- Mozilla Thunderbird 115.3.2
  * fixed: "Open in conversation" did not open messages in a
    thread view (bmo#1849374)
  * fixed: News messsage with non-ASCII author name were
    incorrectly canceled (bmo#1854023)
  * fixed: Localized "Re: " prefix was not stripped from news
    messages (bmo#1845155)
  * fixed: Thunderbird attempted to load accounts missing server
    hostname, causing blank 3-pane window (bmo#1854064)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Card View displayed incorrect recipient name for mail
    and news accounts, depending on folder (bmo#1851955)
  * fixed: Spell check dictionary dialog sometimes pushed Close
    button out of view (bmo#1856152)
  * fixed: Importing calendars from iCal files did not work under
    certain circumstances (bmo#1854422)
  * fixed: Calendar invitations were not sent to event
    participants, only organizer (bmo#1847658)
  * fixed: Calendar alarm dialogs with lengthy descriptions
    pushed buttons out of view (bmo#1852682)
  * fixed: Various visual fixes (bmo#1854836)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1698235200">- Mozilla Thunderbird 115.4.1
  * new: "Manage Newsgroups Subscription" now displayed on
    Account Central when using newsgroups (bmo#1847428)
  * fixed: Manually configured authentication methods on accounts
    did no always persist (bmo#1855515)
  * fixed: "Send Autocrypt key in header" preference was
    available on accounts with no encryption key (bmo#1857541)
  * fixed: SHA-1 certificates were not accepted in Thunderbird
    115; acceptance of SHA-1 messages can now be enabled via
    optional preference (bmo#1854592)
  * fixed: Various Flatpak enhancements
    (bmo#1843110,bmo#1845495,bmo#1850013)
  * fixed: Opening folder in new tab by clicking scroll
    wheel/middle mouse button did not work in Folder Pane
    (bmo#1836853)
  * fixed: Message list did not automatically scroll to new
    messages when switching folders (bmo#1850190)
  * fixed: "Move/Copy to &lt;folder&gt; again" was sometimes displayed
    in the folder context menu when it should not have been
    (bmo#1855160)
  * fixed: Multiple message drafts or message templates could not
    be opened simultaneously for editing (bmo#1853558)
  * fixed: Tools &gt; Filters dialog did not open in Unified Folder
    view if no messages were selected (bmo#1844341)
  * fixed: Printing dialog could be opened, even with no messages
    selected (bmo#1846190)
  * fixed: "From" address was editable when creating a new
    message from a template if the account identity contained
    Unicode characters (bmo#1850055)
  * fixed: Opening a saved .eml file in compose window did not
    preserve message subject from file (bmo#1856166)
  * fixed: Replying to some plaintext messages with desired quote
    selected in original message did not preserve formatting of
    quote (bmo#1839226)
  * fixed: "Edit as New", "Reply", and "Redirect" could not be
    used on multiple messages simultaneously (bmo#1855065)
  * fixed: "Reply to List" option was always enabled, even with
    no list to reply to (bmo#1851971)
  * fixed: "Archive" button in message pane was enabled on
    messages that could not be archived (bmo#1856315)
  * fixed: "Followup-To" label was incorrectly labeled as
    "Newsgroups" (bmo#1854801)
  * fixed: "Save image as" option did not work for RSS feed items
    displayed as a webpage (bmo#1853498)
  * fixed: OTR verification dialog was blank, preventing
    verification of OTR chat sessions (bmo#1852030)
  * fixed: Calendar ICS parser improvements for more reliable
    event import (bmo#1857196)
  * fixed: Permission description strings were missing from Add-
    Ons Manager (bmo#1842490)
  * fixed: Various visual fixes
    (bmo#1855033,bmo#1855204,bmo#1858942,bmo#1857504)
  * fixed: Security fixes
  MFSA 2023-47 (bsc#1216338)
  * CVE-2023-5721 (bmo#1830820)
    Queued up rendering could have allowed websites to clickjack
  * CVE-2023-5732 (bmo#1690979, bmo#1836962)
    Address bar spoofing via bidirectional characters
  * CVE-2023-5724 (bmo#1836705)
    Large WebGL draw could have led to a crash
  * CVE-2023-5725 (bmo#1845739)
    WebExtensions could open arbitrary URLs
  * CVE-2023-5726 (bmo#1846205)
    Full screen notification obscured by file open dialog on
    macOS
  * CVE-2023-5727 (bmo#1847180)
    Download Protections were bypassed by .msix, .msixbundle,
    .appx, and .appxbundle files on Windows
  * CVE-2023-5728 (bmo#1852729)
    Improper object tracking during GC in the JavaScript engine
    could have led to a crash.
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694,
    bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596,
    bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640,
    bmo#1856695)
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
    and Thunderbird 115.4.1
- Removed upstreamed patch mozilla-fix-broken-ffmpeg.patch
- Mozilla Thunderbird 115.4.0
  * pulled and replaced by 115.4.1
- Mozilla Thunderbird 115.3.3
  * fixed: Modifier keys did not work as expected when dragging a
    message over the folder tree on macOS (bmo#1847791)
  * fixed: "Folder Location" toolbar button did not work for
    local folders (bmo#1843979)
  * fixed: "Copy to &lt;folder name&gt; again" option disappeared from
    context menu after copying to Gmail folder with non-ASCII
    name (bmo#1856712)
  * fixed: Default reply identity did not use "Delivered-To"
    address when catch-all was active (bmo#1815559)
  * fixed: "View Headers All" did not work when selected in
    standalone message window (bmo#1855316)
  * fixed: Viewing the mail filter log displayed an error if no
    log file was present (bmo#1789244)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1700654400">- Mozilla Thunderbird 115.5.0
  * fixed: Initial message was not automatically selected when
    opened in conversation (bmo#1856266)
  * fixed: Newsgroup users using FQDN identity generated message
    ID headers with incorrect domain name (bmo#1846837)
  * fixed: Link previews had poor legibility in dark mode
    (bmo#1820244)
  * fixed: Plasma's task switcher displayed the default icon when
    running the Thunderbird Flatpak on Wayland (bmo#1863262)
  * fixed: Link to Flatpak manifest was incorrect (bmo#1863594)
  * fixed: Security fixes
  MFSA 2023-52 (bsc#1217230)
  * CVE-2023-6204 (bmo#1841050)
    Out-of-bound memory access in WebGL2 blitFramebuffer
  * CVE-2023-6205 (bmo#1854076)
    Use-after-free in MessagePort::Entangled
  * CVE-2023-6206 (bmo#1857430)
    Clickjacking permission prompts using the fullscreen
    transition
  * CVE-2023-6207 (bmo#1861344)
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
  * CVE-2023-6208 (bmo#1855345)
    Using Selection API would copy contents into X11 primary
    selection.
  * CVE-2023-6209 (bmo#1858570)
    Incorrect parsing of relative URLs starting with "///"
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
    bmo#1862782)
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
    and Thunderbird 115.5.0
- Mozilla Thunderbird 115.4.3
  * fixed: Forwarding multiple messages as attachments failed
    (bmo#1859938)
  * fixed: Message list scrolling fixes (bmo#1827042,bmo#1845391)
  * fixed: Some text remained incorrectly visible in the message
    list when using "Grouped By" sorting (bmo#1839035)
  * fixed: Subject lines were excessively indented in "Grouped
    by" views (bmo#1841256)
  * fixed: "Open Message in Conversation" was incorrectly enabled
    for selections of multiple messages (bmo#1860539)
  * fixed: States of collapsed and expanded threads were not
    maintained when switching folders (bmo#1807063)
  * fixed: Pressing "n" to move to the next unread message on an
    unread, collapsed thread opened the thread and selected the
    second message instead of the first (bmo#1847792)
  * fixed: Search Folders dialog improvements (bmo#1859050)
  * fixed: "Read Messages" button in Account Central did not
    retrieve mail from POP accounts (bmo#1858733)
  * fixed: Events canceled by the organizer were incorrectly sent
    cancelation message (bmo#1861355)
- Mozilla Thunderbird 115.4.2
  * fixed: No messages or calendar items were displayed on
    startup (bmo#1860885)
  * fixed: Toolbar &amp; Folder View widget fixes (bmo#1858750)
  * fixed: Insert image dialog was not properly sized on some
    localized builds (bmo#1860503)
  * fixed: The "unencrypted subject" icon was always briefly
    displayed when replying to a message (bmo#1828591)
  * fixed: RSS feeds with lengthy attachment filenames cut off
    visible content (bmo#1858114)
  * fixed: RSS feeds with no favicon displayed default icon in
    the folder color (bmo#1858178)
  * fixed: NNTP messages that were previously downloaded were not
    displayed if the server went offline (bmo#1859522)
  * fixed: Vcard photos were not imported when using opening the
    file with Thunderbird (bmo#1859114)
  * fixed: Publishing calendars to invalid URLs did not display a
    helpful error (bmo#1841547)
  * fixed: Publishing calendar events via authenticated WebDAV
    failed (bmo#1857033)
  * fixed: Converting a message to an event failed when the
    message pane was not displayed (bmo#1857835)
  * fixed: Redirect dialog displayed for WebDAV calendars was too
    small (bmo#1856340)
  * fixed: Visual and Theme improvements
    (bmo#1844729,bmo#1860218,bmo#1860272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1703073600">- Mozilla Thunderbird 115.6
  * fixed: Message selection misbehaved after selecting a sub-
    message in an expanded thread, collapsing the thread, then
    pressing up/down to move selection (bmo#1865548)
  * fixed: Thunderbird now attempts to reconnect on a new
    connection after SMTP 4xx errors (bmo#1854567)
  * fixed: HTML FileLink attachments used the wrong encoding
    (bmo#1865269)
  * fixed: Security fixes
  MFSA 2023-55 (bsc#1217974)
  * CVE-2023-50762 (bmo#1862625)
    Truncated signed text was shown with a valid OpenPGP
    signature
  * CVE-2023-50761 (bmo#1865647)
    S/MIME signature accepted despite mismatching message date
  * CVE-2023-6856 (bmo#1843782)
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
    method with Mesa VM driver
  * CVE-2023-6857 (bmo#1796023)
    Symlinks may resolve to smaller than expected buffers
  * CVE-2023-6858 (bmo#1826791)
    Heap buffer overflow in nsTextFragment
  * CVE-2023-6859 (bmo#1840144)
    Use-after-free in PR_GetIdentitiesLayer
  * CVE-2023-6860 (bmo#1854669)
    Potential sandbox escape due to VideoBridge lack of texture
    validation
  * CVE-2023-6861 (bmo#1864118)
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
    headless mode
  * CVE-2023-6862 (bmo#1868042)
    Use-after-free in nsDNSService
  * CVE-2023-6863 (bmo#1868901)
    Undefined behavior in ShutdownObserver()
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328,
    bmo#1856090, bmo#1858033, bmo#1858509, bmo#1862089,
    bmo#1862777, bmo#1864015)
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
    and Thunderbird 115.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1704888000">- Mozilla Thunderbird 115.6.1
  * new: OAuth2 now supported for comcast.net (bmo#1844810)
  * fixed: High CPU usage sometimes occurred with IMAP CONDSTORE
    (conditional STORE) enabled (bmo#1839256)
  * fixed: Replying to a collapsed thread via keyboard shortcut
    (Ctrl+R/Cmd+R) opened a reply for every message in the thread
    (bmo#1866819)
  * fixed: Enabling Grouped By view after reversing sort order of
    column header caused messages to be grouped incorrectly
    (bmo#1868794)
  * fixed: Opening thread pane context menu via keyboard did not
    always scroll view to selection (bmo#1867532)
  * fixed: New mail indicator for POP3 accounts did not indicate
    new messages ready to be downloaded (bmo#1870619)
  * fixed: Messages could not be moved to folders using Message &gt;
    Move To if text or a link in the message had been clicked on
    first (bmo#1868474)
  * fixed: MIME part boundaries were not properly terminated
    (bmo#1805558)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1706097600">- Mozilla Thunderbird 115.7
  * new: Autocrypt Gossip key distribution added (bmo#1853674)
  * fixed: When starting Thunderbird, unread message count did
    not appear on collapsed accounts (bmo#1862774)
  * fixed: Blank window was sometimes displayed when starting
    Thunderbird (bmo#1870817)
  * fixed: Thunderbird "--chrome" flag incorrectly opened extra
    messenger.xhtml (bmo#1866915)
  * fixed: Add-ons did not start correctly when opening
    Thunderbird from other programs (bmo#1800423)
  * fixed: Drag-and-drop installation of add-ons did not work if
    Add-ons Manager was opened from Unified Toolbar (bmo#1862978)
  * fixed: Double-clicking empty space in message pane
    incorrectly opened the currently selected message
    (bmo#1867407)
  * fixed: Canceling SMTP send before progress reached 100% did
    not stop message from sending (bmo#1816540)
  * fixed: PDF attachments open in a separate tab did not always
    restore correctly after restarting Thunderbird (bmo#1846054)
  * fixed: Some OpenPGP dialogs were too small for their contents
    (bmo#1870809)
  * fixed: Account Manager did not work with hostnames entered as
    punycode (bmo#1870720,bmo#1872632)
  * fixed: Downloading complete message from POP3 headers caused
    message tab/window to close when "Close message window/tab on
    move or delete" was enabled (bmo#1861886)
  * fixed: Some ECC GPG keys could not be exported (bmo#1867765)
  * fixed: Contacts deleted from mailing list view still visible
    in Details view (bmo#1799362)
  * fixed: After selecting contacts in Address Book and starting
    a new search, the search results list did not update
    (bmo#1812726)
  * fixed: Various UX and visual improvements (bmo#1866061,bmo#18
    67169,bmo#1867728,bmo#1868079,bmo#1869519,bmo#1832149,bmo#185
    6495,bmo#1861210,bmo#1861286,bmo#1863296,bmo#1864979)
  * fixed: Security fixes
  MFSA 2024-04 (bsc#1218955)
  * CVE-2024-0741 (bmo#1864587)
    Out of bounds write in ANGLE
  * CVE-2024-0742 (bmo#1867152)
    Failure to update user input timestamp
  * CVE-2024-0746 (bmo#1660223)
    Crash when listing printers on Linux
  * CVE-2024-0747 (bmo#1764343)
    Bypass of Content Security Policy when directive unsafe-
    inline was set
  * CVE-2024-0749 (bmo#1813463)
    Phishing site popup could show local origin in address bar
  * CVE-2024-0750 (bmo#1863083)
    Potential permissions request bypass via clickjacking
  * CVE-2024-0751 (bmo#1865689)
    Privilege escalation through devtools
  * CVE-2024-0753 (bmo#1870262)
    HSTS policy on subdomain could bypass policy of upper domain
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
    and Thunderbird 115.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708516800">- Mozilla Thunderbird 115.8
  * new: Added option to show packet dump when OpenPGP fails to
    decrypt (bmo#1874504)
  * fixed: Thunderbird slowed down significantly when opening
    email files (.eml) (bmo#1863957)
  * fixed: Inbox view intermittently reverted to default view
    after moving or deleting messages (bmo#1725127)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Hovering over folder does not always expand subfolders
    (bmo#1873101)
  * fixed: Switching to thread pane of a folder using keyboard
    navigation did not focus top message (bmo#1869557)
  * fixed: Clicking "Sent unsent messages" in Outbox context menu
    while in offline mode did not prompt user to go online
    (bmo#1873487)
  * fixed: Mail tab-specific Unified Toolbar buttons received
    focus incorrectly (bmo#1872239)
  * fixed: Quick Filter settings did not persist when Quick
    Filter bar was turned off (bmo#1850266)
  * fixed: Quick Filters were unusually slow (bmo#1849650)
  * fixed: OpenPGP Key Manager filtering did not work
    (bmo#1873655)
  * fixed: OpenPGP sometimes attempted to decrypt message with
    incorrect key (bmo#1865620)
  * fixed: Autoconfig failed on servers that did not support
    OAuth2 (bmo#1869122)
  * fixed: Opening different attachments with the same name in
    different messages could cause attachment files to become
    conflated (bmo#1873023)
  * fixed: Overflowed attachment list could not be scrolled
    (bmo#1871343)
  * fixed: Passwords disappeared from password manager list after
    applying and clearing filters (bmo#1874646)
  * fixed: Cookies in cookie manager list disappeared after
    applying and then clearing filters (bmo#1876733)
  * fixed: Security fixes
  MFSA 2024-07 (bsc#1220048)
  * CVE-2024-1546 (bmo#1843752)
    Out-of-bounds memory read in networking channels
  * CVE-2024-1547 (bmo#1877879)
    Alert dialog could have been spoofed on another site
  * CVE-2024-1548 (bmo#1832627)
    Fullscreen Notification could have been hidden by select
    element
  * CVE-2024-1549 (bmo#1833814)
    Custom cursor could obscure the permission dialog
  * CVE-2024-1550 (bmo#1860065)
    Mouse cursor re-positioned unexpectedly could have led to
    unintended permission grants
  * CVE-2024-1551 (bmo#1864385)
    Multipart HTTP Responses would accept the Set-Cookie header
    in response parts
  * CVE-2024-1552 (bmo#1874502)
    Incorrect code generation on 32-bit ARM devices
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
    bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597,
    bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795,
    bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286)
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
    and Thunderbird 115.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710244800">- Mozilla Thunderbird 115.8.1
  * fixed: Settings: Updating tags failed if Automatic Updates
    were disabled (bmo#1874557)
  * fixed: Size of collapsed folders in folder pane did not
    include size of subfolders (bmo#1870641)
  * fixed: Reversing sort order of Grouped By views in quick
    search did not reverse (bmo#1868816)
  * fixed: Removing threaded messages in a unified folder
    sometimes resulted in an incorrect number of levels in the
    thread (bmo#1871992)
  * fixed: Thread collapsing did not behave correctly when
    copying thread messages in multi-folder view (bmo#1872253)
  * fixed: S/MIME encryption failed to encrypt if unsupported
    certificate type was encountered (bmo#1876931)
  * fixed: Decrypting a copy of an S/MIME encrypted, opaque-
    signed message created an unreadable message (bmo#1878053)
  * fixed: Thunderbird sometimes changed the subject of messages
    selected while simultaneously decrypting a large PGP-
    encrypted message (bmo#1860977)
  * fixed: "Quote message" menu item in compose window did not
    work when replying to message opened in separate tab
    (bmo#1868626)
  * fixed: Toolbar customization window contents overflowed the
    window width (bmo#1852744)
  * fixed: Security fixes
  MFSA 2024-11 (bsc#1221054)
  * CVE-2024-1936 (bmo#1860977)
    Leaking of encrypted email subjects to other conversations</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1710936000">- Mozilla Thunderbird 115.9
  * fixed: Opened ignored messages in a message thread/subthread
    were not marked as read in IMAP folders (bmo#448876)
  * fixed: Multi-language spellcheck sometimes skipped languages
    (bmo#1790746)
  * fixed: Thread tree did not update when live language
    switching (bmo#1842585)
  * fixed: Visual improvements to "Reorder Attachments" popup
    (bmo#1881945)
  * fixed: Sort order was sometimes incorrect in Grouped By views
    (bmo#1866951)
  * fixed: Selecting "Match all messages" in Filter Rules dialog
    did not disable all search criteria (bmo#1879735)
  * fixed: S/MIME-only signed messages sometimes incorrectly
    displayed signature as invalid (bmo#1741362)
  * fixed: OpenPGP keys uploaded to an HKP keyserver were sent
    with the wrong `Content-Type` header (bmo#1879822)
  * fixed: Keyboard navigation within search toolbar did not work
    (bmo#1878543)
  * fixed: Flatpak builds only had the en-US spell check
    dictionary available (bmo#1882352)
  * fixed: Security fixes
  MFSA 2024-14 (bsc#1221327)
  * CVE-2024-0743 (bmo#1867408)
    Crash in NSS TLS method
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape
    vector
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2024-2616 (bmo#1846197)
    Improve handling of out-of-memory conditions in ICU
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce
    leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user
    accidentally granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
    bmo#1881093)
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
    and Thunderbird 115.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1713787200">- Mozilla Thunderbird 115.10.1
  * fixed: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  * unresolved: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
- Mozilla Thunderbird 115.10
  * fixed: Creating a tag in General Settings with a number as
    the tag name did not work (bmo#1881124)
  * fixed: Quick Filter button selections did not persist after
    restart (bmo#1847265)
  * fixed: Collapsing and expanding message list headers
    sometimes caused header to scroll out of view (bmo#1862197)
  * fixed: Single message with no children inside a parent thread
    sometimes displayed incorrectly as a thread with a duplicate
    of itself as its child (bmo#1427546)
  * fixed: "Get selected messages" menu items did not work
    (bmo#1867091)
  * fixed: "Download and Sync Messages" dialog was too short when
    using Russian locale, obscuring OK button (bmo#1881795)
  * fixed: After changing password on an IMAP account, the
    account could become locked due to too many failed login
    attempts (bmo#1862111)
  * fixed: Retrieving multiline POP3 message from server failed
    if message chunk ended in newline instead of carriage return
    and newline (bmo#1883760)
  * fixed: IMAP, POP3, and SMTP Exchange autoconfiguration did
    not support encryption configuration (bmo#1876992)
  * fixed: Non-empty address book search bar interfered with
    displaying/editing contacts (bmo#1833031)
  * fixed: Deleting attendees from "Invite Attendees" view
    removed attendees from view, but not from invite
    (bmo#1874450)
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1889562)
  * fixed: Performance improvements and code cleanup
    (bmo#1878257,bmo#1883550)
  * fixed: Security fixes
  * unresolved: Thunderbird processes did not exit cleanly; user
    intervention was required via task manager (bmo#1891889)
  MFSA 2024-20 (bsc#1222535)
  * CVE-2024-3852 (bmo#1883542)
    GetBoundName in the JIT returned the wrong object
  * CVE-2024-3854 (bmo#1884552)
    Out-of-bounds-read after mis-optimized switch statement
  * CVE-2024-3857 (bmo#1886683)
    Incorrect JITting of arguments led to use-after-free during
    garbage collection
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-3859 (bmo#1874489)
    Integer-overflow led to out-of-bounds-read in the OpenType
    sanitizer
  * CVE-2024-3861 (bmo#1883158)
    Potential use-after-free due to AlignedBuffer self-move
  * CVE-2024-3863 (bmo#1885855)
    Download Protections were bypassed by .xrm-ms files on
    Windows
  * CVE-2024-3302 (bmo#1881183, https://kb.cert.org/vuls/id/421644)
    Denial of Service using HTTP/2 CONTINUATION frames
  * CVE-2024-3864 (bmo#1888333)
    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
    and Thunderbird 115.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1715860800">- Mozilla Thunderbird 115.11
  * fixed: Splitter arrow between task list and task description
    did not behave as expected (bmo#1888879)
  * fixed: Calendar Event Attendees dialog had incorrectly sized
    rows (bmo#1852304)
  * fixed: Security fixes
  MFSA 2024-23 (bsc#1224056)
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4777 (bmo#1878199, bmo#1893340)
    Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11,
    and Thunderbird 115.11</changelog>
</package>
<package pkgid="cfde0143f2b5d71dc8a2aa000c2b43107e788a3d475406319517f31839a174c2" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="43eb6fb753bd1990cc1f97c4964928053e1fc1a527de5a44078e979f3f2e6071" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="ad0a395c14e26b54b0ccd9e372f7c00c24b9c7606a09ce483c27ab2d402eb83c" name="SAPHanaSR-ScaleOut" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="c31b31fa0453ed8c11df97e3b2e756a396ea1878e24029248893af5f37fd6a22" name="SAPHanaSR-ScaleOut" arch="src">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="d0f1804ce5c643f5638be76e4be4d3a44e9abce91b5b443d94637d1b8f0fd990" name="SAPHanaSR-ScaleOut-doc" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="150000.45.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name server died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- add workaround for 'sapcontrol -function WaitforStopped'
  terminating to early.
  If the master name server dies and does not have a failover
  candidate but there are still running worker nodes the command
  'sapcontrol -function WaitforStopped' terminates to early and
  does not wait till all the remaining worker nodes are down.
  So the resource agent needs to wait during his 'stopSystem'
  function till the last "partial" node is down before returning
  a result to the cluster.
  (bsc#1196650)
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
  <changelog author="abriel@suse.com" date="1689249600">- Version bump to 0.185.0
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * fix the path for the HA/DR provider hook in the global.ini
    examples to be useful
    (bsc#1210573)
  * update man pages:
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1692964800">- Version bump to 0.185.1
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * modify /tmp full fix
    (bsc#1210728)
  * update man pages:
    SAPHanaSR-ScaleOut.7
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1702468800">- Version bump to 0.185.2
  * fix cluster state in SAPHanaSR-manageAttr by supporting the
    different behaviour of 'crmadmin -q -S' in different pacemaker
    versions
    (bsc#1217830)
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSrMultiTarget hook has successfully reported a
    SR event to the cluster a still existing fall-back state file
    will be removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaController.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.185.3
  * Fix the hexdump log for empty node states
  * Fix exception handling in function 'logTimestamp' of HA/DR
    provider SAPHanaSrMultiTarget.py (bsc#1218901)
  * update man pages:
    SAPHanaSR-ScaleOut.7
    SAPHanaSR.py.7
    SAPHanaSrMultiTarget.py.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-showAttr.8
    SAPHanaSR-manageProvider.8</changelog>
</package>
<package pkgid="43d7e0b632411e6e0bfe04ed9cb80055d4c03d61981f6b66ad27f7fd879c3a6e" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.2.7" rel="150500.3.9.1"/>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
</package>
<package pkgid="018c692ad22e0691d93dad0b46e98b28ff901c4059e1f6f8395dc9039dd490e2" name="SAPHanaSR-angi" arch="src">
  <version epoch="0" ver="1.2.7" rel="150500.3.9.1"/>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
</package>
<package pkgid="56796144e77787eaec40627a45b56338fc3f2ede6f97eb98d38683f8cf49d043" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.162.4" rel="150000.4.44.1"/>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1698926400">- Version bump to 0.162.2
  * inside SAPHanaSR-hookHelper use the full path for the cibadmin
    command to support non root users in special user environments
    (bsc#1216484)
  * if the SAPHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    SAPHanaSR-monitor.8
    SAPHanaSR-showAttr.8
  * add improvements from SAP to the RA scripts, part II
    (jsc#PED-1739, jsc#PED-2608)</changelog>
  <changelog author="abriel@suse.com" date="1706529600">- Version bump to 0.162.3
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * fix scope of variable 'site' to be global
    (bsc#1219194)
  * susChkSrv.py - relocate function logTimestamp()
  * update man pages:
    SAPHanaSR.7
    ocf_suse_SAPHana.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 0.162.4
  * unify global.ini examples
  * add demo script SAPHanaSR-upgrade-to-angi-demo
  * update man pages:
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.py.7</changelog>
</package>
<package pkgid="ac74198ca85ea27504297d47ef0cc9076f2ed5b0c70ad26eb330a8e55612fcb0" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="66357789d77c102e20d261f724e311304ee86c8bffd6820b3140d2114debb37f" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="677bf4943eca1e2577223e6deba0c46ea7051e153a0b3a0d7347d1d2760b2b7e" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f5acb4333f9ba4435a4bf2cbb6b582100947dacf644039f386f96b9329fdea67" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="817a720836b054e4e80197e7fd409b929d5586f820e3261ad13965ecad0fb610" name="ant" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="1a97373c1c9d3facd0b58860a6fa1d173fba2957fcabcb5aa8c5c2f249ea7d9f" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f66b1883ac47296f7edd4b822d09abb2362a58cc0bca086a9b0d4bec85459976" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="9675fd504ca9496ad7e9ef51f95a51264e621f86761d210e3fbb15ec400b3788" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="71e3b4f01d8302672600056fac0ff43772696f015ee01e88800bfa5bb4da686f" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="368be49745f104d29e59b49c88323c7be2b26d9aa17dc77aa36971c512a9ff14" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="3c81786fc6c55af109af9f5c839e4efa9f3cee0d2c001fdbbb43230f6a17e921" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f85184bd1ca83900e99a0159ae3273580b4598e08dfd16227bd8b39a6dca2869" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="52309cbbca2e73fcf8744d90e8fc3e9415075f768191804e5cc2aa81e86b7896" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="7da998f26ff5924ba7977be930b7d6a57420c58a771b04dbd0a74f6f4a43f228" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="35382fd3d9e6ad3b4d30e77f57b032c858fa281d48e3a836841ef9b2b92049df" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="6a3e5bb99604d1d2549fdfc3fb64a685ffadab5ddb151621733accf52f3ec921" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="fbc5f9d14a3c79ca97a51ebb4b9a6ab48d1cc9adf811f9de5f96342f0a873988" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="be421c463f56b84178154364f72725daea51071bafd8cbbf04c3b1feb9c493bc" name="ant-jakartamail" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="fbc12591a5ecd2d7eed791a024d6d4542fd07a1b392a937ff577ec99f8699a15" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="6179b5bc9a84f59bb6eebd4bb1c653b57390c2d6e7da0ecd7ca06fbdd3d5ff33" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="8650ca83dac1c6e98b14778f4b1e80da0c68d59dab38b19ed6f2a2625fc18750" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="120d168cb500b0c10dbd858a5598eca680d6655a7d8ce7eac189a25e9e43c063" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="de561ed662bbe9a4b0c6c2a0c776a5f609304ddd2815f32d4fe9059fb06a8d99" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="be23b6e110d357905214d8c5679a352c3a3405c09ce78b30e68eea4ba21f3493" name="ant-junit" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="0b6feffb53325df3e9b21520964a1c2f0bd96322e893fd44a7c07887ce99512f" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="273c0417a7d5389c8db27a9fe7bb54026788dfe6cd971ddafae0d3f97f144e59" name="ant-junit5" arch="src">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="f610bd3257fc3d48f856d22237487660624e4df6fa53eb2c088830a7320f9a1a" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="3b2195c79c9090ff69f57495ffaae2e7d676e50b1aee3117136478d04f764492" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="5f191773d5849d059b32eb6d338a2729a40bf2c06d63606fe162bb7958eb865f" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="cc8ab96f7397814a3908ee5ff25ae406de7ccb9dd3f9706a94c140d645b06543" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="eb1138642cd6442cdf7436ce80b27151af201676ee27b8e66f65edd5bf419096" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.14" rel="150200.4.25.1"/>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766400">- Remove jakarta-commons-* dependencies [bsc#1133997]
  * Use apache-commons-logging and apache-commons-net in optional tasks</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589457600">- Update to 1.10.8
  * Security fix: [CVE-2020-1945, bsc#1171696]
  - A new property ant.tmpdir provides improved control over the
    location Ant uses to create temporary files
  * sshexec failed to write output to a file if the file didn't exist
  * Fixes a regression in javac task involving command line argument files.
  * sshexec, sshsession and scp now support a new sshConfig parameter.
  It specified the SSH configuration file (typically ${user.home}/.ssh/config)
  defining the username and keyfile to be used per host.
  * "legacy-xml" formatter of junitlauncher task wasn't writing out
  exceptions that happen in @BeforeAll method of a test.
  * Fixes a potential ConcurrentModificationException in XMLLogger.
  * Fixes a bug in junitlauncher task in forked mode, where if a listener element
  was used as a sibling element for either the test or testclasses element,
  then the forked mode launch would fail.
  * Fixes an issue in AntStructure where an incorrect DTD was being generated.
  * Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
  * The runant.py script should now work with Python 3.
  * rmic has been removed from Java 15. The task will now throw an
  exception if you try to use it while running Java 15 or newer.
- Remove ant-python3.patch fixed upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1601553600">- Update to 1.10.9
  * Security fix: [bsc#1177180, CVE-2020-11979]
  - Insecure temporary file vulnerability
  * Fixed bugs:
  - The ftp task could throw a NullPointerException if an
    error occured.
  - Propertyset now also sees in-scope local properties.
  - Replaced ReaderInputStream with the version of Apache
    Commons IO due to problems with surrogate pairs.
  - &lt;fixcrlf&gt; will no longer remove the temporary file it
    just created before writing to it.
  - &lt;sshexec&gt; and &lt;scp&gt; didn't deal with wildcard hostnames
    in shs config files properly.
  * Other changes:
  - Ant will no longer log a warning if it doesn't find tools.jar.
  - The &lt;jar&gt; task accepts now a nested &lt;indexjarsmapper&gt;
    element that can be used to perform custom filename
    transformations for the &lt;indexjars&gt; archives.
  - Added a new PropertyEnumerator interface that extensions can
    provide if they are managing properties unknown to the Ant project.
  - Added some special code to support GraalVM JavaScript as
    javax.script scripting engine for JavaScript. In particular we
    relax some security settings of GraalVM so that scripts can access
    Ant objects.
  - Also Ant enables Nashorn compatibility mode by default, you can
    disable that by setting the magic Ant property
    ant.disable.graal.nashorn.compat to true.
  - If the magic property ant.tmpdir hasn't been set and Ant can
    control the permissions of directories it creates it will create an
    owner-owned temporary directory unaccessible to others as default
    tempdir as soon as a temporary file is created for the first time.</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 1.10.10
  * SCP (with sftp=true) task would fail if fetching file located
    in root directory.
  * Fixed: javac task would fail if the arguments file it
    (internally) created didn't quote the # character.
  * Make sure LegacyXmlResultFormatter encodes characters illegal
    in XML the same way JUnit5's built-in formatter would.
  * LegacyXmlResultFormatter no longer double-encodes &lt;&gt;&amp; in
    system-err and system-out.
  * Fixes a bug in junitlauncher task's legacy-xml formatter,
    where the testcase representing a @Parameterized JUnit4 test
    wasn't being reported in the XML.
  * Fixes a bug where the ant-testutil-sources.jar that gets
    published to Maven central repository didn't contain any
    source files.
  * The &lt;http&gt; condition didn't follow redirects from http to https.
  * ZipOutputStream now overrides write(int) in order to make sure
    single byte writes get the same treatment as array writes.
  * Fixes a potential deadlock in junitlauncher task when using
    legacy-xml reporter.
  * javaversion condition now has a new "atmost" attribute. See
    the javaversion manual for more details
  * The "listener" nested element of the "junitlauncher" task now
    has a new "useLegacyReportingName" attribute which can be used
    to control the test identifiers names that get reported by the
    listener. See the junitlauncher manual for more details. Note that
    this change also introduces a new "setUseLegacyReportingName" method
    on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter
    interface. This will break backward compatibility with any of your custom
    result formatters which implemented this interface and such implementations
    are now expected to implement this new method.
  * A new attribute preserveduplicates allows &lt;resourcelist&gt; to
    return the same resource multiple times when set to true.
  * A new attribute filterbeforeconcat in &lt;concat&gt; can be used to
    decide whether the filterchain should be applied to the
    concatenated content (the default) or each nested resource
    individually before concatenating them.
  * The ssh tasks now share a new nested element additionalConfig that can
    be used to set config values for the jsch Session used by the task.
  * Added new discardOutput and discardError properties to redirector
    and the exec, apply and java tasks which can be used to completely
    discard any (error) output. This is a platform independent
    alternative to directiong output to any kind of null device.
  * junitlauncher now prints a more useful and instantaneous summary of
    tests being run, closely matching the junit task's summary.</changelog>
  <changelog author="david.anes@suse.com" date="1639569600">- Update to 1.10.12:
  * The update includes fixes for the following CVEs:
  CVE-2021-36374, bsc#1188469
    Excessive memory allocation when reading a specially
    crafted ZIP archive or a derived formats.
  CVE-2021-36373, bsc#1188468
    Excessive memory allocation when reading a specially
    crafted TAR archive.
  * The http condition would follow redirects even when "followRedirects" attribute
  was set to "false". This has now been fixed. Bugzilla Report 65489
  * Made sure setting build.compiler to the fully qualified classname
  that corresponds to extJavac or modern has the same effect as using
  the shorter alias names. Bugzilla Report 65539
  * Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper.
  Bugzilla Report 65424
  * The implementation of AntClassLoader#findResources() has been changed to optimize
  it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405
  Github Pull Request #151
  * AntClassLoader now implements the ClassLoader#findResource(String) method.
  Github Pull Request #150
  * Ant tries to avoid file name canonicalization when possible.
  Bugzilla Report 65499
  * javadoc task will now look for warning messages in the STDERR stream too
  when "failonwarning" is set to true to account for changes in JDK 17+
  * The tar task now preserves symlinks of nested tarfilesets.
  Github Pull Request #142
- Changes from 1.10.11:
  * a race condition could lead to NullPointerExceptions when running
  tasks in parallel.
  Bugzilla Report 65316
  * fixed potential OutOfMemory errors when reading broken archives
  using the tar or zip formats or formats derived from zip.
  * org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now
  has a new protected createExecuteWatchdog() method for allowing it to be overriden.
  Github Pull Request #147
  * Upgraded AntUnit to 1.4.1.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Disable a test failing to compile with junit5 5.8.x</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- Update ant keyring with new developer keys.
- Update to 1.10.13:
  * Breaking changes:
  - &lt;get&gt; has a new attribute authenticateOnRedirect that can be
    used to prevent Ant from sending the configured credentials
    when following a redirect. It is false by default, which means
    builds that rely on credentials being used on the redirected
    URI may break.
  * Fixed bugs:
  - the PropertyEnumerator change introduced in 1.10.9 proved to
    be not fully backwards compatible when combined with certain
    custom PropertyHelper implementations - for example when using
    AntXtras.
  - legacy-xml reporter of the junitlauncher task now escapes ]]&gt;
    when writing CDATA.
  - &lt;scp&gt; may leak connections when trying to preserve the last
    modified timestamps of files transferred recursively from a
    server.
  - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH
    environment variable value to an incorrect date. This has now
    been fixed.
  - fetch.xml didn't set up non-default repositories propery and
    thus failed to download JAI.
  - When building and installing Ant distribution from source, the
    build script would change permissions on unrelated files in
    the destination directory. This is now fixed and such
    unrelated files in the destination directory will be left
    untouched.
  - parsing tar entries with multiple NUL bytes in their name
    would include garbage bytes as the name included all bytes up
    to the last NUL rather than the first.
  - loadresource might log warnings even though quiet was set to
    true
  - javac task would add paths constructs containing wildcards to
    the internally created argument file where wildcards are not
    allowed
  * Other changes:
  - added an implementation of the MIME Mail sender based on the
    repackaged Jakarta Mail package rather than javax Mail.
  - The "listener" element in the junitlauncher task now supports
    an "extension" attribute to control the filename extension
    of the generated output file from the listener.
  - &lt;ftp&gt; now supports FTPs.
  - DirectoryScanner avoids listing directory contents when it
    known it will never use the information retrieved. This may
    improve performance in some special cases.
  - &lt;manifest&gt; will now create the parent directory of the
    manifestFile attribute if it doesn't exist.
  - org.apache.tools.ant.BuildLogger now has a new method
    getMessageOutputLevel() which returns the currently set
    message output level.</changelog>
  <changelog author="fstrba@suse.com" date="1674734400">- Package and distribute the new ant-jakartamail</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to 1.10.14:
  * Changes that could break older environments:
    + Resource#compareTo now invokes getName rather than toString as
    the later may be costly (for example in the case of a
    StringResource).
    + When using Java 18 or higher, Ant will no longer use Java
    SecurityManager because it has been deprecated for removal and
    by default is disallowed to be set at runtime
    https://openjdk.org/jeps/411.
    This will mean that the "&lt;permissions&gt;" type is no longer
    functional when using Java 18 or higher.
    Furthermore, when using Java 18 or higher, if the build
    executes tasks that call "java.lang.System.exit()" and if
    those tasks aren't running in a forked VM of their own, then
    such tasks will now kill the entire Ant build process. It is
    recommended that such tasks be updated to launch in a forked
    VM so that the System.exit() call will not impact the JVM in
    which Ant process runs.
  * Fixed bugs:
    + log only the stylesheet name in the xslt task.
    + junitlauncher task's "test" and "listener" elements which take
    a "outputDir" property were incorrectly resolving the
    outputDir against the current working directory instead of the
    project's basedir.
    + regexmapper would, in some cases, incorrectly consume
    backslash characters from the "to" attribute, resulting in
    missing backslashes in the output.
    + &lt;fixcrlf&gt;, &lt;replace&gt; and &lt;replaceregexp&gt; now try to preserve
    the file permissions of the files they modify.
    + junitlauncher task would fail if a forked test timed out even
    if haltOnFailure was set to false.
    + fixes a bug in org.apache.tools.zip.ZipOutputStream where,
    even when "zip64Mode" is set to "always", ZipOutputStream may
    not create a CEN extra field data for the entry.
    + legacy-xml listener of junitlauncher task wouldn't report
    certain failures involving junit jupiter dynamic tests.
    + allow.class which was introduced in Ant 1.10.13 release, has
    been removed from this 1.10.14 release. This class was
    introduced in context of the SecurityManager changes in
    Ant 1.10.13, which have now been reverted in Ant 1.10.14,
    since they caused several regressions.
  * Other changes:
    + &lt;fork&gt; element of the junitlauncher task now has a new
    optional "java" attribute which can be used to point to a
    different Java installation for runnning the forked tests.
    + made sure &lt;echoproperties&gt; sorts the echoed properties on
    JDK9+ as well.
    + org.apache.tools.ant.taskdefs.Recorder class now introduces a
    setLogLevel(LogLevel level) method.
    + The &lt;fork&gt; element of junitlaunchertask now allows a
    "forkMode" attribute. forkMode=perTestClass can now be used to
    launch each test class in a separate forked JVM.</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
</package>
<package pkgid="b8fb31b86163a064d2587158238baad627e2d233bcf6a930fdb51c6fbcbc63bd" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="abfafc15d76d4943d22f4f67184af6a6a58cbfd843c405b9bd3dd74a2c063af7" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="73a3b8cffccea06e42dabe088c6c847e50c88d44a3e1c40f28b8915f4cc96c3a" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="d99f2a49729c4ba96dd4687aa474c3d970a5e6edde15f9c2fa146fa1d74af99b" name="apache2" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="88b05bf122ed2f78ad583cf461d4143698d518f0edaa823c4f2e5e275492601e" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b782b7532ef9180fdf3e062be12000894452a8a8255932bf4db84f9f9e7be368" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="508faa8566b388ef82fcc838bf82f28371d5b651cae82c235ee29e41b3f7f017" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="a45649fb1f8a227eebf5419a883e6930f51fa0b4a1b149e2020f20df943cca4d" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="3a0e6cfe3c471db0a40960cae81e3dc571dbbdbdcb151e91f67ca1d9278b4a85" name="apache2-devel" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="8420b5db6035ee48efd0ff500f3e7ab1cd31b326f3a6d99de02e6f83343c3566" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="e2361a92430288d3c9eabba32520b88b87b194b19ea3d18e151d32084c4302a7" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b3aa93d997ea1856937266b1a3534a07c97bd2fe7886efb3d487b952c5ac1e4c" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="8db4caa550d65636b5451e1afdf6713c6487f7bb60ebec975c001357cbbe816b" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="1dd35e8f1af5b06c3b57209d7bc63c727d9f0c248afc7bd0c60072a063800eb7" name="apache2-event" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="c5fb607039e7f0d1c9922e610140d06ecfd80f72a9c9ec6204ab78e332017c1e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="5360c09fa41d6da08450ad63c18fe99015f71c0b54b49276e62ff9b7a7e69c93" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="24ea6c0ed18663b2e28ad9c240776b281c290fa6af1155820590ebc22d18d7fb" name="apache2-manual" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="7c0bd73eff38078e9ebe517417ad5ffc74b04e9a37c4e2575bb9f6a498dc9f54" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="81a16f77bbdaa0ab9ec37a0fedef5453e2ec4d75a7bf25208819efb2cd9d2da3" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="cd78c6b4ff51a64591d00e964683ba5092c679a3849504bdc8d3e15a279b83e0" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="68bb0d8cd8e45293cfcd6cf1281b3a118ed3c6981e95bfe609365de6065cfdb4" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="ec22b75e50852b2a307de1c6fd0595237abe83b8d674ee20890e2568c5f9cab1" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="fbedcf3c24ed930ca224932812bc143d934568ae6a407aa9eaf34bf3ea334b27" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="1e0d00a25ddacc263f6dfbf1c29ddd11353897d8ce62f20d496a0d6dbec418df" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="9fedeff7299705ca16bb250136f2073670c5b3d250b173c721f1358a786766ba" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="28ae75d83b4decfeeb68a6886167cb0eee7aebba8a33f027363841562089a4e7" name="apache2-utils" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="feb27f065f37dc1a607bd2333c2b29f81b2ab3cf8f78d9c8d279b8f86ebd69a1" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="f94099fe6963011f966b7ac44fc46b7d3f1466325cdbcae504616b915c052baa" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="b22d0ef518c74436179935bbccd0aaee109fa51251d71a1eeb48c78fa208c998" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="16ba9c6aacb1f0548c851c96795d0c97b3f6822ee090a92a567776e97fe47ee8" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="483677221d7482734693fa90f4446342e35ad49ae9b6675202a3c7725d6cb6e1" name="apache2-worker" arch="src">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="d0bff62eb8cbc819354ea996bc05929e6f3e1c4872c07abc22239c890925bf7a" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.58" rel="150600.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 2.4.53
  * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds
    (cve.mitre.org)
    Out-of-bounds Write vulnerability in mod_sed of Apache HTTP
    Server allows an attacker to overwrite heap memory with possibly
    attacker provided data.
    This issue affects Apache HTTP Server 2.4 version 2.4.52 and
    prior versions.
    Credits: Ronald Crane (Zippenhop LLC)
  * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with
    very large or unlimited LimitXMLRequestBody (cve.mitre.org)
    If LimitXMLRequestBody is set to allow request bodies larger
    than 350MB (defaults to 1M) on 32 bit systems an integer
    overflow happens which later causes out of bounds writes.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Anonymous working with Trend Micro Zero Day Initiative
  * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability
    in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org)
    Apache HTTP Server 2.4.52 and earlier fails to close inbound
    connection when errors are encountered discarding the request
    body, exposing the server to HTTP Request Smuggling
    Credits: James Kettle &lt;james.kettle portswigger.net&gt;
  * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of
    in r:parsebody (cve.mitre.org)
    A carefully crafted request body can cause a read to a random
    memory area which could cause the process to crash.
    This issue affects Apache HTTP Server 2.4.52 and earlier.
    Credits: Chamal De Silva
  * ) core: Make sure and check that LimitXMLRequestBody fits in system memory.
    [Ruediger Pluem, Yann Ylavic]
  * ) core: Simpler connection close logic if discarding the request body fails.
    [Yann Ylavic, Ruediger Pluem]
  * ) mod_http2: preserve the port number given in a HTTP/1.1
    request that was Upgraded to HTTP/2. Fixes PR65881.
    [Stefan Eissing]
  * ) mod_proxy: Allow for larger worker name.  PR 53218.  [Yann Ylavic]
  * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When
    an attempt to load a dbm driver fails, log clearly which driver triggered
    the error (not "default"), and what the error was. [Graham Leggett]
  * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the
    minimum when tunneling requests (websockets, CONNECT requests).
    Backend timeouts can be configured more selectively (per worker if needed)
    as front end timeouts and typically the backend timeouts reflect the
    application requirements better.  PR 65886 [Ruediger Pluem]
  * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers
    when an efficient TLS implementation is available. [Yann Ylavic]
  * ) core, mod_info: Add compiled and loaded PCRE versions to version
    number display.  [Rainer Jung]
  * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/
    resources if challenge type 'http-01' is not configured for a domain.
    Fixes &lt;https://github.com/icing/mod_md/issues/279&gt;.
    [Stefan Eissing]
  * ) mod_dav: Fix regression when gathering properties which could lead to huge
    memory consumption proportional to the number of resources.
    [Evgeny Kotkov, Ruediger Pluem]
  * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x)
    for regular expression evaluation. This depends on locating pcre2-config.
    [William Rowe, Petr Pisar &lt;ppisar redhat.com&gt;, Rainer Jung]
  * ) Add the ldap function to the expression API, allowing LDAP filters and
    distinguished names based on expressions to be escaped correctly to
    guard against LDAP injection. [Graham Leggett]
  * ) mod_md: the status description in MDomain's JSON, exposed in the
    md-status handler (if configured) did sometimes not carry the correct
    message when certificates needed renew.
    [Stefan Eissing]
  * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting
    and/or reaching MaxConnectionsPerChild.  PR 65769.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1647259201">- httpd-framework updated to svn1898917
- deleted patches
  - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed)
  - apache2-perl-io-socket.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689600">- version update to 2.4.54
  Changes with Apache 2.4.54
  * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by
    hop-by-hop mechanism (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may not send the
    X-Forwarded-* headers to the origin server based on client side
    Connection header hop-by-hop mechanism.
    This may be used to bypass IP based authentication on the origin
    server/application.
    Credits: The Apache HTTP Server project would like to thank
    Gaetan Ferry (Synacktiv) for reporting this issue
  * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with
    websockets (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may return lengths to
    applications calling r:wsread() that point past the end of the
    storage allocated for the buffer.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-30522: mod_sed denial of service
    (cve.mitre.org)
    If Apache HTTP Server 2.4.53 is configured to do transformations
    with mod_sed in contexts where the input to mod_sed may be very
    large, mod_sed may make excessively large memory allocations and
    trigger an abort.
    Credits: This issue was found by Brian Moussalli from the JFrog
    Security Research team
  * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua
    r:parsebody (cve.mitre.org)
    In Apache HTTP Server 2.4.53 and earlier, a malicious request to
    a lua script that calls r:parsebody(0) may cause a denial of
    service due to no default limit on possible input size.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28615: Read beyond bounds in
    ap_strcmp_match() (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier may crash or disclose
    information due to a read beyond bounds in ap_strcmp_match()
    when provided with an extremely large input buffer.  While no
    code distributed with the server can be coerced into such a
    call, third-party modules or lua scripts that use
    ap_strcmp_match() may hypothetically be affected.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite()
    (cve.mitre.org)
    The ap_rwrite() function in Apache HTTP Server 2.4.53 and
    earlier may read unintended memory if an attacker can cause the
    server to reflect very large input using ap_rwrite() or
    ap_rputs(), such as with mod_luas r:puts() function.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi
    (cve.mitre.org)
    Apache HTTP Server 2.4.53 and earlier on Windows may read beyond
    bounds when configured to process requests with the mod_isapi
    module.
    Credits: The Apache HTTP Server project would like to thank
    Ronald Crane (Zippenhop LLC) for reporting this issue
  * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request
    smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.53 and prior versions.
    Credits: Ricter Z @ 360 Noah Lab
  * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0.  PR 66063.
    [Petr Sumbera &lt;petr.sumbera oracle.com&gt;, Yann Ylavic]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) mod_md:  a bug was fixed that caused very large MDomains
    with the combined DNS names exceeding ~7k to fail, as
    request bodies would contain partially wrong data from
    uninitialized memory. This would have appeared as failure
    in signing-up/renewing such configurations.
    [Stefan Eissing, Ronald Crane (Zippenhop LLC)]
  * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue.
    PR 65666.  [Yann Ylavic]
  * ) MPM event: Restart children processes killed before idle maintenance.
    PR 65769.  [Yann Ylavic, Ruediger Pluem]
  * ) ab: Allow for TLSv1.3 when the SSL library supports it.
    [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic]
  * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce
    transmission delays.  PR 66019.  [Yann Ylavic]
  * ) MPM event: Fix accounting of active/total processes on ungraceful restart,
    PR 66004 (follow up to PR 65626 from 2.4.52).  [Yann Ylavic]
  * ) core: make ap_escape_quotes() work correctly on strings
    with more than MAX_INT/2 characters, counting quotes double.
    Credit to &lt;generalbugs@zippenhop.com&gt; for finding this.
    [Stefan Eissing]
  * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of
    an ACME CA. This gives a failover for renewals when several consecutive attempts
    to get a certificate failed.
    A new directive was added: `MDRetryDelay` sets the delay of retries.
    A new directive was added: `MDRetryFailover` sets the number of errored
    attempts before an alternate CA is selected for certificate renewals.
    [Stefan Eissing]
  * ) mod_http2: remove unused and insecure code. Fixes PR66037.
    Thanks to Ronald Crane (Zippenhop LLC) for reporting this.
    [Stefan Eissing]
  * ) mod_proxy: Add backend port to log messages to
    ease identification of involved service.  [Rainer Jung]
  * ) mod_http2: removing unscheduling of ongoing tasks when
    connection shows potential abuse by a client. This proved
    counter-productive and the abuse detection can false flag
    requests using server-side-events.
    Fixes &lt;https://github.com/icing/mod_h2/issues/231&gt;.
    [Stefan Eissing]
  * ) mod_md: Implement full auto status ("key: value" type status output).
    Especially not only status summary counts for certificates and
    OCSP stapling but also lists. Auto status format is similar to
    what was used for mod_proxy_balancer.
    [Rainer Jung]
  * ) mod_md: fixed a bug leading to failed transfers for OCSP
    stapling information when more than 6 certificates needed
    updates in the same run.  [Stefan Eissing]
  * ) mod_proxy: Set a status code of 502 in case the backend just closed the
    connection in reply to our forwarded request.  [Ruediger Pluem]
  * ) mod_md: a possible NULL pointer deref was fixed in
    the JSON code for persisting time periods (start+end).
    Fixes #282 on mod_md's github.
    Thanks to @marcstern for finding this.  [Stefan Eissing]
  * ) mod_heartmonitor: Set the documented default value
    "10" for HeartbeatMaxServers instead of "0". With "0"
    no shared memory slotmem was initialized.  [Rainer Jung]
  * ) mod_md: added support for managing certificates via a
    local tailscale daemon for users of that secure networking.
    This gives trusted certificates for tailscale assigned
    domain names in the *.ts.net space.
    [Stefan Eissing]
- modified patches
  % apache-test-application-xml-type.patch (refreshed)
  % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed)
  % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1654689601">- update httpd-framework to svn revision 1898917</changelog>
  <changelog author="schubi@intern" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- Remove references to README.QUICKSTART and point them to
  https://en.opensuse.org/SDB:Apache_installation (bsc#1203573)</changelog>
  <changelog author="coolo@suse.com" date="1663934400">- The 2.4.54 release brought support for PCRE2, but for that we also
  need to change buildrequires to pcre2-devel</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="david.anes@suse.com" date="1674043200">- This update fixes the following security issues:
  * CVE-2022-37436 [bsc#1207251], mod_proxy backend HTTP response splitting
  * CVE-2022-36760 [bsc#1207250], mod_proxy_ajp Possible request smuggling
  * CVE-2006-20001 [bsc#1207247], mod_dav out of bounds read, or write of zero byte
- Update to 2.4.55:
  * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to
    2.4.55 allows a backend to trigger HTTP response splitting
    (cve.mitre.org)
    Prior to Apache HTTP Server 2.4.55, a malicious backend can
    cause the response headers to be truncated early, resulting in
    some headers being incorporated into the response body. If the
    later headers have any security purpose, they will not be
    interpreted by the client.
    Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)
  * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp
    Possible request smuggling (cve.mitre.org)
    Inconsistent Interpretation of HTTP Requests ('HTTP Request
    Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server
    allows an attacker to smuggle requests to the AJP server it
    forwards requests to.  This issue affects Apache HTTP Server
    Apache HTTP Server 2.4 version 2.4.54 and prior versions.
    Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec
    at Qi'anxin Group
  * ) SECURITY: CVE-2006-20001: mod_dav out of  bounds read, or write
    of zero byte (cve.mitre.org)
    A carefully crafted If: request header can cause a memory read,
    or write of a single zero byte, in a pool (heap) memory location
    beyond the header value sent. This could cause the process to
    crash.
    This issue affects Apache HTTP Server 2.4.54 and earlier.
  * ) mod_dav: Open the lock database read-only when possible.
    PR 36636 [Wilson Felipe &lt;wfelipe gmail.com&gt;, manu]
  * ) mod_proxy_http2: apply the standard httpd content type handling
    to responses from the backend, as other proxy modules do. Fixes PR 66391.
    Thanks to Jérôme Billiras for providing the patch.
    [Stefan Eissing]
  * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
    [Basant Kumar Kukreja &lt;basant.kukreja sun.com&gt;, Alejandro Alvarez
    &lt;alejandro.alvarez.ayllon cern.ch&gt;]
  * ) mod_proxy_hcheck: Honor worker timeout settings.  [Yann Ylavic]
  * ) mod_http2: version 2.0.10 of the module, synchronizing changes
    with the gitgub version. This is a partial rewrite of how connections
    and streams are handled.
  - an APR pollset and pipes (where supported) are used to monitor
    the main connection and react to IO for request/response handling.
    This replaces the stuttered timed waits of earlier versions.
  - H2SerializeHeaders directive still exists, but has no longer an effect.
  - Clients that seemingly misbehave still get less resources allocated,
    but ongoing requests are no longer disrupted.
  - Fixed an issue since 1.15.24 that "Server" headers in proxied requests
    were overwritten instead of preserved. [PR by @daum3ns]
  - A regression in v1.15.24 was fixed that could lead to httpd child
    processes not being terminated on a graceful reload or when reaching
    MaxConnectionsPerChild. When unprocessed h2 requests were queued at
    the time, these could stall. See #212.
  - Improved information displayed in 'server-status' for H2 connections when
    Extended Status is enabled. Now one can see the last request that IO
    operations happened on and transferred IO stats are updated as well.
  - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection
    send a GOAWAY frame much too early on new connections, leading to invalid
    protocol state and a client failing the request. See PR65731 at
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=65731&gt;.
    The module now initializes the HTTP/2 protocol correctly and allows the
    client to submit one request before the shutdown via a GOAWAY frame
    is being announced.
  - :scheme pseudo-header values, not matching the
    connection scheme, are forwarded via absolute uris to the
    http protocol processing to preserve semantics of the request.
    Checks on combinations of pseudo-headers values/absence
    have been added as described in RFC 7540. Fixes #230.
  - A bug that prevented trailers (e.g. HEADER frame at the end) to be
    generated in certain cases was fixed. See #233 where it prevented
    gRPC responses to be properly generated.
  - Request and response header values are automatically stripped of leading
    and trialing space/tab characters. This is equivalent behaviour to what
    Apache httpd's http/1.1 parser does.
    The checks for this in nghttp2 v1.50.0+ are disabled.
  - Extensive testing in production done by Alessandro Bianchi (@alexskynet)
    on the v2.0.x versions for stability. Many thanks!
  * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when
    request ':authority' is known. Improved test case that did not catch that
    the previous 'fix' was incorrect.
  * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests
    using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski]
  * ) mod_proxy: The AH03408 warning for a forcibly closed backend
    connection is now logged at INFO level.  [Yann Ylavic]
  * ) mod_ssl: When dumping the configuration, the existence of
    certificate/key files is no longer tested.  [Joe Orton]
  * ) mod_authn_core: Add expression support to AuthName and AuthType.
    [Graham Leggett]
  * ) mod_ssl: when a proxy connection had handled a request using SSL, an
    error was logged when "SSLProxyEngine" was only configured in the
    location/proxy section and not the overall server. The connection
    continued to work, the error log was in error. Fixed PR66190.
    [Stefan Eissing]
  * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300.
    [Alessandro Cavaliere &lt;alessandro.cavalier7 unibo.it&gt;]
  * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing]
  * ) mod_md: a new directive `MDStoreLocks` can be used on cluster
    setups with a shared file system for `MDStoreDir` to order
    activation of renewed certificates when several cluster nodes are
    restarted at the same time. Store locks are not enabled by default.
    Restored curl_easy cleanup behaviour from v2.4.14 and refactored
    the use of curl_multi for OCSP requests to work with that.
    Fixes &lt;https://github.com/icing/mod_md/issues/293&gt;.
  * ) core: Avoid an overflow on large inputs in ap_is_matchexp.  PR 66033
    [Ruediger Pluem]
  * ) mod_heartmonitor: Allow "HeartbeatMaxServers 0" to use file based
    storage instead of slotmem. Needed after setting
    HeartbeatMaxServers default to the documented value 10 in 2.4.54.
    PR 66131.  [Jérôme Billiras]
  * ) mod_dav: DAVlockDiscovery option to disable WebDAV lock discovery
    This is a game changer for performances if client use PROPFIND a lot,
    PR 66313. [Emmanuel Dreyfus]</changelog>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
</package>
<package pkgid="fc9b9fc24bb3c8fff08cf7b52ddaa492c061a502399ae3b20d999e5d62ff687a" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="283dd182aa308409de99fccc4d51b4988349ecd4c488a43a99ce7c43cb9207d8" name="apiguardian" arch="src">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="44935e5b916c34db94ad9fa5722477964718e7f97a1c4c800d4ef65bcce70b14" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="ea22388d430de3a6ac6bfc6649e24318918591c00f326ee54676a07092b281d6" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.25.3" rel="150200.5.4.3"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
</package>
<package pkgid="36d14b0b961124536a93f90d3f1f1befd2c3abfb76934bb3987edf49548a23db" name="assertj-core" arch="src">
  <version epoch="0" ver="3.25.3" rel="150200.5.4.3"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
</package>
<package pkgid="a4dcc3b3d0ccf84f536848f87dcf1cc944c5a5cb45776b474f7120a1d9213f6f" name="aws-nitro-enclaves-binaryblobs-upstream" arch="aarch64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="7cfc2ebc5d95a7e714920729aae6acf830f418d19c745507b7c2198f47992734" name="aws-nitro-enclaves-binaryblobs-upstream" arch="x86_64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="854ecd3e41c450a97aeafe1bd9d17365a711efd9603b0a17de97a81574ed13cd" name="aws-nitro-enclaves-cli" arch="aarch64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="7d324ee70ea4fb2ef8993fd408403734b4de995d8a2acd76a496092256daa63c" name="aws-nitro-enclaves-cli" arch="src">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="e643f5644ab298513732c28bad6f7099eb30df2e91fc68238ef24de43e3027b4" name="aws-nitro-enclaves-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="285b7971012b9a71fd74da8c6daf80eb1029f6e1d31d9417c31b1cb9b0d27172" name="bcc" arch="src">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="35376adf7d3c3c6f399b81223996cf83722908c8a180cd4e331685c276602963" name="bcc-devel" arch="aarch64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="201112de433198c4c56c97e3cb551677452b89844c665668b3b26a0acdb8e95f" name="bcc-devel" arch="ppc64le">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="c891f341dfefda774d0f29933a569e995b9d6fe63d0d05445b4855ccc882baae" name="bcc-devel" arch="s390x">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="d43310472a7b1d6d789256f0d7db827d8950e64a4b30e68e171a28b40fa97154" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="416da9d3331f1bce3fe17a23f760968ff39fd51246f4e8ec8445ff2fefc8d6e4" name="bcc-docs" arch="noarch">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="5653f8b348015b3882dade8f4674b9d9a9718ee1375e103d5bf18c3131e34488" name="bcc-examples" arch="noarch">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="1ce2ff96d7b1fa4149de45239dbcefceb893ab97a6695d10e6407fdc9226de2f" name="bcc-tools" arch="aarch64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="ba0d570de8c80ada527a16b23a9bc55c3183de46c84547d846f332234767dddb" name="bcc-tools" arch="ppc64le">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="1e0b8ee257a6d55c9154a54b2ff7d7df07f0539cd10e8d49862082b548656a66" name="bcc-tools" arch="s390x">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="b7ad8c15f51d31427d3f1f9b0c81663f9b155d9c7b71eabbe35cb85b9a7d0e4c" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="dcf0a94d3e6b2fbf11ae2cfc588545d19c12bbb56f11a3ea3af1ed669bb91c5b" name="bpftool" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="d07d3641f9832715cf93a9cc898fa22556a1761804e80dc94ca4fe51c457a977" name="bpftool" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="7ccb46bad37466e1d69178a78a300512a743416974650fefd875fd5b1cf80e39" name="bpftool" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="4fe9a244459f281c3abd13b21602e2aa62ff15418a2257f77d3d491c81f7b56d" name="bpftool" arch="src">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="c4da7c84826b7addba3974cf3dd18142391cf1f7c9222c29f1f63c035174e61d" name="bpftool" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150600.19.3.3"/>
  <changelog author="mrostecki@opensuse.org" date="1557403200">- Initial release</changelog>
  <changelog author="lnussel@suse.de" date="1578484800">- use optflags for building
- build and install man pages</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1683115200">- Add dwarves as build dependency as pahole is called during build
- Fix BTF-to-C converter's padding logic (jsc#PED-3924)
  New patch: libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1693569600">- Update bpftool align with v5.19-based kernel
  + Implement BTFGen (i.e gen min_core_btf command)
  + Support for new btf kind BTF_KIND_DECL_TAG and BTF_KIND_TYPE_TAG
  + Support multiple .rodata/.data internal maps in skeleton
  + Probes for bounded loops, instruction set extensions, and offload-enabled
  + Generate Light skeleton for the kernel
  + Enable libbpf's strict mode by default
  + Show program &amp; link type names
  + Support showing program names declared in BTF
  + Add BPF_TRACE_KPROBE_MULTI to attach type names table
  + Check unprivileged_bpf_disabled against value of 2
  + Use sysfs vmlinux when dumping BTF by ID
- Drop libbpf-Fix-BTF-to-C-converter-s-padding-logic.patch as the fix is now
  included</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697803200">- Update bpftool align with v6.4-based kernel
  + Support for KIND_RESTRICT in gen min_core_btf command
  + Support BPF_MAP_TYPE_USER_RINGBUF map type
  + Support new cgroup local storage
  + Support printing opcodes and source file references in CFG
  + Probe for memcg-based accounting and bump rlimit only if needed
  + Allow toggling autoattach for bpf prog load|loadall
  + Remove support of --legacy option for bpftool
  + Remove BPF_OBJ_NAME_LEN restriction when looking up bpf program by name</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1705924800">- Update bpftool to align with v6.5-based kernel
  * show map IDs along with struct_ops links
  * show map IDs instead of raw value for map_of_maps types
  * show target_{obj,btf}_id in tracing link info</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Enable showing info for processes holding BPF map/prog/link/btf FDs
  (jsc#PED-8375)</changelog>
</package>
<package pkgid="20fe22671c5376cef3be4895fb1889e455ebfcec49e4b7228c183f178c3a2a22" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.14.16" rel="150200.5.7.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Initial packaging with v1.14.0
- Add patch:
  * 00-asm5.patch
    ~ asm5 does not support the Opcodes.V20 constant</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1679313600">- Update to v1.14.2
  * Changes of v1.14.2
    + Fix offset mapping for local variable array remapping in
    Advice.
    + Add possibility to specify an index for skipOn and repeatOn
    which resolves the checked value from a returned array.
  * Changes of 1.14.1
    + Add extended scope for Maven Byte Buddy plugin to include all
    non-test-dependencies.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Update to v1.14.3
  * Changes of v1.14.3
    + Make MethodGraph.Compiler failsafe when processing incomplete
    methods.
    + Update ASM.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680523200">- Remove patch:
  * 00-asm5.patch - not needed due to update of objectweb-asm</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681387200">- Update to v1.14.4
  * Changes of v1.14.4
    + Include instrumented type and auxiliary types in TypePool
    that is passed to TypeWriter.</changelog>
  <changelog author="fstrba@suse.com" date="1683288000">- Do not bootstrap using downloaded binaries, but build the
  minimal bootstrap package from sources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1686398400">- Update to v1.14.5
  * Changes of v1.14.5
    + Avoid use of location if agent argument separator is
    contained.
    + Allow failure of member substitution if no element is
    separated.
    + Allow retry in case of parallel class injection.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1692100800">- Update to v1.14.6
  * Changes of v1.14.6
    + Add PatchMode.SUBSTITUTE and
    ResettableClassFileTransformer.Substitutable for in-order
    patching.
    + Allow for explicit specification og differential matcher when
    patching an AgentBuilder.
    + Add platform loader to locator for build plugins.
    + Correctly resolve accessors for fields with capitalized first
    letter.
    + Make jars for Android read-only as newer versions require it.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1693483200">- Update to v1.14.7
  * Changes of v1.14.7
    + Correctly read minor version from class file.
    + Catch type resolution errors when applying Plugin.Engine.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1694692800">- Update to v1.14.8
  * Changes of v1.14.8
    + Correctly read versions from class file that would use both
    bytes.
    + Fix Byte Buddy Gradle plugin for Gradle 8.3+.
    + Correct field and static method access on subtypes in
    MemberSubstitution.
    + Support APK 7.4+ versions in Byte Buddy Gradle for Android
    plugin.
- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1695816000">- Remove dependency on findbugs
- Do not produce bootstrap package</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Update to v1.14.9
  * Changes of v1.14.9
    + Update ASM to version 9.6
    + Support Android plugin to support APG version 7.4</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703073600">- Update to v1.14.10
  * Changes of v1.14.10
    + Add lazy facade to default TypePool in AgentBuilder to avoid
    parsing of types ignored by name.
    + Avoid module info classes in Android plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703160000">- Update to v1.14.11
  * Changes of v1.14.11
    + Adjusts Gradle plugin to support Gradle 8.4 without warnings.
    + Avoid blurry exception on build plugin for fail fast.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1708171200">- Update to v1.14.12
  * Changes of v1.14.12
    + Pin proxy class file version to avoid implicit changes when
    using Graal native image.
    + Add support for Java 23.
    + Add missing @MaybeNull annotation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1711627200">- Update to v1.14.13
  * Changes of v1.14.13
    + Avoid resolving type variables when generic type processing
    is disabled.
    + Improve error message for Byte Buddy agent external attach.
    + Fix build for modular jars when using later version than Java
    8.</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Split the whole package into sub-packages
- Added patch:
  * 0001-Avoid-bundling-asm.patch
    + Do not bundle asm, but use external artifact
  * 0002-Remove-dependencies.patch
    + Remove optional dependency on jna</changelog>
  <changelog author="fstrba@suse.com" date="1716292800">- Upgrade to v1.14.15
  * Changes of v1.14.15
    + Allow attaching from root on J9.
  * Changes of v1.14.14
    + Adjust type validation to accept additional names that are
    legal in the class file format.
    + Fix dynamic attach on Windows when a service user is active.
    + Avoid failure when using Android's strict mode.
- Removed patch:
  * 0002-Remove-dependencies.patch
    + not needed since we have jna packaged</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1716465600">- Update to v1.14.16
  * Changes of v1.14.16
    + Update ASM and introduce support for Java 23.</changelog>
</package>
<package pkgid="9eb5a8b2307fbcff380790e6af19453458c223d6ab266adfd6582d9d5fb13f61" name="byte-buddy" arch="src">
  <version epoch="0" ver="1.14.16" rel="150200.5.7.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Initial packaging with v1.14.0
- Add patch:
  * 00-asm5.patch
    ~ asm5 does not support the Opcodes.V20 constant</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1679313600">- Update to v1.14.2
  * Changes of v1.14.2
    + Fix offset mapping for local variable array remapping in
    Advice.
    + Add possibility to specify an index for skipOn and repeatOn
    which resolves the checked value from a returned array.
  * Changes of 1.14.1
    + Add extended scope for Maven Byte Buddy plugin to include all
    non-test-dependencies.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Update to v1.14.3
  * Changes of v1.14.3
    + Make MethodGraph.Compiler failsafe when processing incomplete
    methods.
    + Update ASM.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680523200">- Remove patch:
  * 00-asm5.patch - not needed due to update of objectweb-asm</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681387200">- Update to v1.14.4
  * Changes of v1.14.4
    + Include instrumented type and auxiliary types in TypePool
    that is passed to TypeWriter.</changelog>
  <changelog author="fstrba@suse.com" date="1683288000">- Do not bootstrap using downloaded binaries, but build the
  minimal bootstrap package from sources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1686398400">- Update to v1.14.5
  * Changes of v1.14.5
    + Avoid use of location if agent argument separator is
    contained.
    + Allow failure of member substitution if no element is
    separated.
    + Allow retry in case of parallel class injection.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1692100800">- Update to v1.14.6
  * Changes of v1.14.6
    + Add PatchMode.SUBSTITUTE and
    ResettableClassFileTransformer.Substitutable for in-order
    patching.
    + Allow for explicit specification og differential matcher when
    patching an AgentBuilder.
    + Add platform loader to locator for build plugins.
    + Correctly resolve accessors for fields with capitalized first
    letter.
    + Make jars for Android read-only as newer versions require it.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1693483200">- Update to v1.14.7
  * Changes of v1.14.7
    + Correctly read minor version from class file.
    + Catch type resolution errors when applying Plugin.Engine.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1694692800">- Update to v1.14.8
  * Changes of v1.14.8
    + Correctly read versions from class file that would use both
    bytes.
    + Fix Byte Buddy Gradle plugin for Gradle 8.3+.
    + Correct field and static method access on subtypes in
    MemberSubstitution.
    + Support APK 7.4+ versions in Byte Buddy Gradle for Android
    plugin.
- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1695816000">- Remove dependency on findbugs
- Do not produce bootstrap package</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Update to v1.14.9
  * Changes of v1.14.9
    + Update ASM to version 9.6
    + Support Android plugin to support APG version 7.4</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703073600">- Update to v1.14.10
  * Changes of v1.14.10
    + Add lazy facade to default TypePool in AgentBuilder to avoid
    parsing of types ignored by name.
    + Avoid module info classes in Android plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703160000">- Update to v1.14.11
  * Changes of v1.14.11
    + Adjusts Gradle plugin to support Gradle 8.4 without warnings.
    + Avoid blurry exception on build plugin for fail fast.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1708171200">- Update to v1.14.12
  * Changes of v1.14.12
    + Pin proxy class file version to avoid implicit changes when
    using Graal native image.
    + Add support for Java 23.
    + Add missing @MaybeNull annotation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1711627200">- Update to v1.14.13
  * Changes of v1.14.13
    + Avoid resolving type variables when generic type processing
    is disabled.
    + Improve error message for Byte Buddy agent external attach.
    + Fix build for modular jars when using later version than Java
    8.</changelog>
  <changelog author="fstrba@suse.com" date="1713441600">- Split the whole package into sub-packages
- Added patch:
  * 0001-Avoid-bundling-asm.patch
    + Do not bundle asm, but use external artifact
  * 0002-Remove-dependencies.patch
    + Remove optional dependency on jna</changelog>
  <changelog author="fstrba@suse.com" date="1716292800">- Upgrade to v1.14.15
  * Changes of v1.14.15
    + Allow attaching from root on J9.
  * Changes of v1.14.14
    + Adjust type validation to accept additional names that are
    legal in the class file format.
    + Fix dynamic attach on Windows when a service user is active.
    + Avoid failure when using Android's strict mode.
- Removed patch:
  * 0002-Remove-dependencies.patch
    + not needed since we have jna packaged</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1716465600">- Update to v1.14.16
  * Changes of v1.14.16
    + Update ASM and introduce support for Java 23.</changelog>
</package>
<package pkgid="f8b513e54e4436f50e79eefd7aacf5e4be476049ca857aff811e5485ad8088e8" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="7bb204c9964d0932be24d1c0b734023e403ed22dce4a3396e73a5c2f721d9638" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="bf71a7ba837ae745728821957915cbde45ae7c3ef410da4e27e9e17d976c0c52" name="cargo" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="9bc1ed8d92dde938c344cae9101eda90f4c7ed7b6874b6237287c96ed3f27234" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="efde600d2ddc052d7e6fb056eca524c8a1f40070d7d2a32bf305eab11aeb5be8" name="cargo1.78" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="d67b7313415e650b76fa09e4b6b5cef00af669db544b9bc937dcae4fc01147df" name="cargo1.78" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="36600d35db9e9a2e5efd1206ebcfe6e58bff23dbf3bae2fa4dc1645dfe1688b8" name="cargo1.78" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="723efe343407d00c043abdc7214cd479d2e2f163e20478f31a6c47e7a8db099b" name="cargo1.78" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="82f9ad143f3c50d7d34b822f1ca9346c7069465bb4b42aacf476fb09fd8cccc2" name="csp-billing-adapter" arch="src">
  <version epoch="0" ver="0.10.0" rel="150400.9.14.1"/>
  <changelog author="sean.marlow@suse.com" date="1687953600">- Update to version v0.3.0
  + Add new exception type
  + Improved initial metering test exception handling
- Update to version 0.2.0
  + Split up `create_csp_config` into smaller components.
- Update to version 0.1.1
  + Fix retry on exception in the meter billing test.
  + Fix the timestamp in meter billing test call. This is
    a datetime object not a string timestamp.
- Update to version 0.1.0
  + Wait one cycle at startup before checking usage data
  + Dry run metering against API at startup
  + Sleep only for remainder of cycle to account for processing time.
  + Handle multiple errors using error list
  + Use cache and csp config in memory
  + Pass in now timestamp instead of re-generating
  + Save config map and cache once at end of loop
  + Add base product to csp config
  + Add timestamps to log messages
  + Add retry mechanism for functions that may fail randomly
- Update to version 0.0.2
  + Handle no matching dimension found for volume billing
  + Only load testing support plugins in unit tests
  + Add additional logging to core paths
  + Add Initial exception handling
- initial build</changelog>
  <changelog author="rjschwei@suse.com" date="1688385600">- Update to version 0.3.1
  + Add -service subpackage
  + systemd enablement to run the code as a daemon in a VM</changelog>
  <changelog author="sean.marlow@suse.com" date="1690891200">- Update to version 0.4.0
  + Handle status dictionary from meter billing and legacy string response.
  + Implement supported for tiered consumption reporting.</changelog>
  <changelog author="jesus.bv@suse.com" date="1692360000">- Fix python3-csp-billing-adapter dependency for service</changelog>
  <changelog author="rjschwei@suse.com" date="1692360001">- Update to version 0.5.0
  + Integrate log handling and log configuration</changelog>
  <changelog author="jesus.bv@suse.com" date="1695038400">- Update to version 0.6.0
  Update message when records list is empty
  Only sleep at initial deployment
  Skip invalid records
  Log format variables on a const</changelog>
  <changelog author="sean.marlow@suse.com" date="1695211200">- Update to version 0.7.0:
  * Add get version hook spec</changelog>
  <changelog author="sean.marlow@suse.com" date="1697457600">- Update to version 0.8.0:
  * Clear billing status with an empty dictionary</changelog>
  <changelog author="sean.marlow@suse.com" date="1705665600">- Update to version 0.9.0:
  * Add metering archive feature</changelog>
  <changelog author="sean.marlow@suse.com" date="1713873600">- Update to version 0.10.0:
  * Add free trial feature</changelog>
</package>
<package pkgid="d19332d84fe25e772f02223a08d52c9e7534dfa31d6905ac5e239379029af05b" name="csp-billing-adapter-service" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="150400.9.14.1"/>
  <changelog author="sean.marlow@suse.com" date="1687953600">- Update to version v0.3.0
  + Add new exception type
  + Improved initial metering test exception handling
- Update to version 0.2.0
  + Split up `create_csp_config` into smaller components.
- Update to version 0.1.1
  + Fix retry on exception in the meter billing test.
  + Fix the timestamp in meter billing test call. This is
    a datetime object not a string timestamp.
- Update to version 0.1.0
  + Wait one cycle at startup before checking usage data
  + Dry run metering against API at startup
  + Sleep only for remainder of cycle to account for processing time.
  + Handle multiple errors using error list
  + Use cache and csp config in memory
  + Pass in now timestamp instead of re-generating
  + Save config map and cache once at end of loop
  + Add base product to csp config
  + Add timestamps to log messages
  + Add retry mechanism for functions that may fail randomly
- Update to version 0.0.2
  + Handle no matching dimension found for volume billing
  + Only load testing support plugins in unit tests
  + Add additional logging to core paths
  + Add Initial exception handling
- initial build</changelog>
  <changelog author="rjschwei@suse.com" date="1688385600">- Update to version 0.3.1
  + Add -service subpackage
  + systemd enablement to run the code as a daemon in a VM</changelog>
  <changelog author="sean.marlow@suse.com" date="1690891200">- Update to version 0.4.0
  + Handle status dictionary from meter billing and legacy string response.
  + Implement supported for tiered consumption reporting.</changelog>
  <changelog author="jesus.bv@suse.com" date="1692360000">- Fix python3-csp-billing-adapter dependency for service</changelog>
  <changelog author="rjschwei@suse.com" date="1692360001">- Update to version 0.5.0
  + Integrate log handling and log configuration</changelog>
  <changelog author="jesus.bv@suse.com" date="1695038400">- Update to version 0.6.0
  Update message when records list is empty
  Only sleep at initial deployment
  Skip invalid records
  Log format variables on a const</changelog>
  <changelog author="sean.marlow@suse.com" date="1695211200">- Update to version 0.7.0:
  * Add get version hook spec</changelog>
  <changelog author="sean.marlow@suse.com" date="1697457600">- Update to version 0.8.0:
  * Clear billing status with an empty dictionary</changelog>
  <changelog author="sean.marlow@suse.com" date="1705665600">- Update to version 0.9.0:
  * Add metering archive feature</changelog>
  <changelog author="sean.marlow@suse.com" date="1713873600">- Update to version 0.10.0:
  * Add free trial feature</changelog>
</package>
<package pkgid="08aaedc563d30c61fd088e7f19c4fe7461faedeafa50275c02473adbfd199774" name="desktop-data-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="4d60af3f78a1a12c4a4629a7f4e681c034cb270367f0174b022d4cef50d6d175" name="desktop-data-SLE" arch="src">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="vuntz@opensuse.org" date="1316606400">- Update openSUSE-default-static.xml to reference the new filename
  for default wallpapers.</changelog>
  <changelog author="coolo@suse.com" date="1316692800">- wallpaper moved out of here, so require it</changelog>
  <changelog author="vuntz@opensuse.org" date="1316692801">- Drop the bits related to creating the XML file used by GNOME for
  the default wallpaper, including the alternatives handling. This
  all moves to branding-openSUSE now.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317038400">- Remove update-alternatives Requires(post)/Requires(postun) since
  we don't use this anymore (moved to wallpaper-branding-openSUSE).</changelog>
  <changelog author="vuntz@opensuse.org" date="1318334400">- Add back Hidden.directory and a mention of it in
  applications.menu to help KDE 3 (bnc#686786).
- Drop hidden-fix.diff: the updated fix is now in git.</changelog>
  <changelog author="coolo@suse.com" date="1318939200">- desktop-data is fine with any wallpaper branding for 12.1</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- bump version to 12.2</changelog>
  <changelog author="coolo@suse.com" date="1355140800">- bump version to 12.3</changelog>
  <changelog author="wstephenson@suse.com" date="1358769600">- Update for changes to XDG menu spec (bnc#443364):
  * Edutainment is now two top level menus, Education and Science
  * All additional categories allowed for Education are now
    permitted for Science
  * Monitor additional category is permitted for System and Network
  * Spirituality, Maps, Feed, NetworkService, Shooter additional
    categories were added</changelog>
  <changelog author="wstephenson@suse.com" date="1359460800">- Fix Audio players show up in Video Player submenun (bnc#788628)
- Fix application menu schema warning from kbuildsycoca (bnc#789456)</changelog>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="6a3449ede84ee667baaebffb8e195f4d9c609034aa9835a41bcee08fbf7ae579" name="desktop-data-SLE-extra" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.3.11"/>
  <changelog author="coolo@suse.com" date="1366804800">- bump version to 13.1</changelog>
  <changelog author="coolo@suse.com" date="1378123200">- remove supplements and move it to the patterns. Supplements
  are rather intransparent</changelog>
  <changelog author="fcrozat@suse.com" date="1392638400">- Initial package for SLE, based on openSUSE version.</changelog>
  <changelog author="alarrosa@suse.com" date="1455710400">- Upgrade package from upstream sources
  (commit 78d352e589c4867e4c66e6e48f31b86de861db9f).
  * Add package_edutainment.png icon which is used by
  Yast's software management module as Education package group icon
  (bnc#953027)
  * Remove package-manager.desktop, yast2-packager now provides
  yast2-packager.desktop which handles rpm files again
- Remove the update_rpm script and replace it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Update the spec file accordingly.</changelog>
  <changelog author="UTC - qzhao@suse.com" date="1455796800">- Disable "Novell" branding in wallpaper, FATE# 320506 Disable
  "Novell" branding in wallpaper</changelog>
  <changelog author="qzhao@suse.com" date="1504612800">- Update desktop-data-SLE.spec: Correct a path error on removing
  curvy2.png to accomplish FATE#320506 completely(bsc#1058231).</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- Version update for SLE15.</changelog>
  <changelog author="rbrown@suse.com" date="1517227200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fcrozat@suse.com" date="1517227201">- Remove very old obsoletes/provides.
- Kill %%post code for migrating from KDE3.
- Remove calls to icon_theme_cache macros, this is handled by
  file-triggers now.</changelog>
  <changelog author="mgorse@suse.com" date="1712577600">- Fix typo in the desktop files for some of the wallpapers
  (bsc#1222146).</changelog>
</package>
<package pkgid="45de15b70f7bc4317c51baa5eb07937d0399e6ba96dd593cdf797beb6501ff46" name="dhcp-tools" arch="aarch64">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="07765be7e4809913f22dce13453f2152d06ece3a9187fe0883a872bcd6880c4e" name="dhcp-tools" arch="ppc64le">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="76ea91d86fc371fad2d11e1c058dcce2e6f2ff01d1d0733b5d39499146d8a889" name="dhcp-tools" arch="s390x">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="a8694e0f389fe01e4a7976ea7d4056b0346587baf6cb1b38c05e9357ec592767" name="dhcp-tools" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="985176000">- new package</changelog>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="2acad7449741a52acc95476af4a7002a774fa019cc98054ecfc6f3efb88d636a" name="dhcp-tools" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.3.2"/>
  <changelog author="poeml@suse.de" date="998654400">- update dhcpdump to 1.2 and dhcping to 1.1</changelog>
  <changelog author="poeml@suse.de" date="1059048000">- update dhcpdump to 1.5. Rephrased changelog:
  - better input checking regarding validity of the header of the UDP packet
  - Added some DHCP options from the INIA website (not all are parsed yet)
  - added chaddr filter, contributed by Peter Apian-Bennewitz
  - client-identifier is now printed as long as it is.
  - autoconfiscated
- update dhcping to 1.2 (no significant changes)
- install CHANGES and other accompanying files
- use %defattr
- re-create man pages</changelog>
  <changelog author="poeml@suse.de" date="1078315200">- update dhcpdump to 1.5
  - Option 82, submitted by Phil Pennock &lt;pdp@nl.demon.net&gt;
  - Add fflush(), submitted by Gary Colman &lt;gary@colmans.net&gt;
  - Fix problem with padding, they were not handled properly
    and caused old memory to be reused.
- compile with -fno-strict-aliasing</changelog>
  <changelog author="poeml@suse.de" date="1084190400">- fix parsing of IP header for output of tcpdump-3.8.1 [#38528]</changelog>
  <changelog author="poeml@suse.de" date="1094731200">- fix parsing of IP header and data packages for output of
  tcpdump-3.8.[23] [#44946], and apply the fix on 9.2 or newer
- apply previous patch on 9.1 or newer</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="varkoly@suse.com" date="1709726400">- Adapt license</changelog>
</package>
<package pkgid="91f9d75e372e58b9268e50aac5b7b7df2933ca0a933b0b39432e02772d0583f7" name="dom4j" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="07ccbd26e4787f563f0b3735d2c56ac2fb7480777e60a8183a181e3f772db974" name="dom4j" arch="src">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="44135ee0037543bdd456241afbd5065a038a2f0c327d74b4346ff0428fd07b82" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="690def763b1ab0ffc876c06e1e0c7ed2db848736a95dc9c1f0795d4421baa1d3" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="150200.12.10.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * dom4j-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * dom4j-javadoc.patch
    + Don't load urls while building javadoc in environment without
    connectivity</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="0d4b8ded7c092e5cdac91fed578031ab9145a70711da8a1a57a6a9289fabdbf2" name="dpdk22" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="8acd9c6c1841ecf24cbf898bf282c6cc6bb915a97d092f8591807610fee2ab34" name="dpdk22" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="4b0693353773d33f619b1d617b2b32569d33ba15c877df9da4040800b1b68cd1" name="dpdk22" arch="src">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="492c129074a913714809acff906cf4d427c20469b542fbad233546e24f509e7e" name="dpdk22" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="d384137158c37546efacca06b3d66441dd28bb26c76ce1bda53fc1028846f713" name="dpdk22-devel" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="55709be4059d5b4982c465fbcb600b374a909a10a721b811f4e37a8b8df9e448" name="dpdk22-devel" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="6660e359a789fba3ac7261dcecae5272ffbc29d6eb40baace708a35208c03521" name="dpdk22-devel" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="04f2d5e0eee4ecf6e0b2eedd066c7e86e3464ce162be22f56f57636077d17f14" name="dpdk22-devel-static" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="b8509a375b49d58cb6a556ecb8e5ce8f6995ffb4ec6e3176b7ab8dbd3a068ca5" name="dpdk22-devel-static" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="df586b03823071291cd9dce08aee23175feed2c4824f7fb58e91ae8f04e08799" name="dpdk22-devel-static" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2b984dc7202a343ef293a247cdba8ee1b0d41d8ba2704417289647d1309deda3" name="dpdk22-doc" arch="noarch">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="739cf6e9451ab2961e8137a24e9f901436b6a87e8dfad0049aa7005707921a83" name="dpdk22-examples" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="6603d622aaf90a0a5109d74172e233ba3568716dfa26d065898e63c6f001cfb3" name="dpdk22-examples" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="372a87b4546527d80204e5a9d6d9013990db5fdb313670483054806925c09663" name="dpdk22-examples" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2df09383c8aa3de486cb881be3725c965f9d126117b19a2e64009d450ab48e76" name="dpdk22-kmp-default" arch="aarch64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="a79643de3acdbb96f04758a84634a22f71a9eb2fff55b06ef32a02ae90252796" name="dpdk22-kmp-default" arch="ppc64le">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="01b93c896dfd2d6a3261bb3ee730690a7816103d1d7ef6fd320b15c87723b918" name="dpdk22-kmp-default" arch="x86_64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="56cef3c0b663fb3fc45543912932531b782d0f2bbe7a391bc5340ad3273a782b" name="dpdk22-thunderx" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="e3315db9aa40cec0ffbab70ee3edca7100c5dffbcfc4f5f6becd83d7b1e49319" name="dpdk22-thunderx" arch="src">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="cfd6376c9d64744c2c601e8a170ea2b4aa02e8c1662d5ef63a786e86648e70d1" name="dpdk22-thunderx-devel" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="2723858e0b3249e6178236a9522aa21d760a8703267adacfc2641b929e14cca4" name="dpdk22-thunderx-devel-static" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="f9d1341622784bf30a3034eaa861c5493ea2b9964bad67ba967e500e9290118b" name="dpdk22-thunderx-doc" arch="noarch">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="a7697e012011c635bc492fb984c272363d3685b21c401b36e8d70b2b5d03ac75" name="dpdk22-thunderx-examples" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="bbe21c74ea7fb631967fb3e3bbf7cdd4255d340d1e2535c6d7f05356aeb8fe3c" name="dpdk22-thunderx-kmp-default" arch="aarch64">
  <version epoch="0" ver="22.11.1_k5.14.21_150500.55.62" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="1362ead2637db86014c4ae84d97a2023339c2b9779c30b17ff033f38b3162c69" name="dpdk22-thunderx-tools" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="14a897accb69dee858af3b1ffc9159433358434c920e47b2c6b2cf42fa2e4f5e" name="dpdk22-tools" arch="aarch64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="fc9b681e2a9506e7c97e2f52d0ffbe8e3d6fcfafc1324e5acb64291cc3181c22" name="dpdk22-tools" arch="ppc64le">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="3f1a6bee315aa64d1545671f8c7a68506051433fc416895e0a90ed1b7df18d0d" name="dpdk22-tools" arch="x86_64">
  <version epoch="0" ver="22.11.1" rel="150500.5.5.3"/>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert “common/qat: fix GEN3 marketing name”
    Revert “net/bnxt: fix number of TQM ring”
    Revert “net/bnxt: fix TQM ring context memory size”
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add 0001-kni-fix-build-with-Linux-5.9.patch: fixes the build against kernel
  &gt;= 5.9. Also see here:
  http://inbox.dpdk.org/users/CAJFAV8w8ozEkdSKdBHEHXJDxpChorGa1jUsNEcPMptG30bWykw@mail.gmail.com/T</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update LTS version to maintenance release 19.11.8
  * vhost/crypto: fix data length check (CVE-2020-14374)
  * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378)
  * vhost/crypto: fix incorrect write back source
  * vhost/crypto: fix missed request check for copy mode
    (CVE-2020-14376 CVE-2020-14377)
  * vhost/crypto: fix pool allocation
  * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375)
  * Changes from 19.11.6:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14
  * Changes from 19.11.7:
    https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18
- Drop security patches, fixed with 19.11.5
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6
- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1626955200">- Normalize all Python script shebangs to use Python 3.</changelog>
  <changelog author="sweiberg@suse.com" date="1631275200">- Update LTS version to maintenance release 19.11.10
  * app/crypto-perf: fix out-of-place mempool allocation
  * app/test: fix IPv6 header initialization
  * app/testpmd: change port link speed without stopping all
  * app/testpmd: fix help string for port reset
  * app/testpmd: fix IPv4 checksum
  * app/testpmd: fix MAC address after port reset
  * app/testpmd: fix offloads for newly attached port
  * app/testpmd: fix Tx checksum calculation for tunnel
  * bitmap: fix buffer overrun in bitmap init
  * bus: clarify log for non-NUMA-aware devices
  * bus/dpaa: fix freeing in FMAN interface destructor
  * common/mlx5: fix compatibility with OFED port query API
  * common/mlx5: fix Netlink port name padding in probing
  * common/mlx5: use new port query API if available
  * cryptodev: fix freeing after device release
  * crypto/mvsam: fix AES-GCM session parameters
  * crypto/mvsam: fix capabilities
  * crypto/mvsam: fix options parsing
  * crypto/mvsam: fix session data reset
  * crypto/octeontx: fix freeing after device release
  * crypto/qat: fix Arm build with special memcpy
  * devtools: fix file listing in maintainers check
  * distributor: fix 128-bit write alignment
  * doc: add limitation for ConnectX-4 with L2 in mlx5 guide
  * doc: announce common prefix for ethdev
  * doc: fix default burst size in testpmd
  * doc: fix spelling
  * drivers/net: fix memzone allocations for DMA memory
  * ethdev: fix doc of flow action
  * eventdev: fix event port setup in tx adapter
  * flow_classify: fix leaking rules on delete
  * (github-cpaelzer-stable/19.11) telemetry: fix race in telemetry control thread creation
  * ipc: stop mp control thread on cleanup
  * kni: fix crash on userspace VA for segmented packets
  * kni: fix mbuf allocation for kernel side use
  * mempool/octeontx2: fix shift calculation
  * net/bnxt: check access to possible null pointer
  * net/bnxt: cleanup code
  * net/bnxt: clear cached statistics
  * net/bnxt: detect bad opaque in Rx completion
  * net/bnxt: fix auto-negotiation on Whitney+
  * net/bnxt: fix check for PTP support in FW
  * net/bnxt: fix error handling in VNIC prepare
  * net/bnxt: fix error messages in VNIC prepare
  * net/bnxt: fix missing barriers in completion handling
  * net/bnxt: fix nested lock during bonding
  * net/bnxt: fix ring and context memory allocation
  * net/bnxt: fix Rx burst size constraint
  * net/bnxt: fix Rx interrupt setting
  * net/bnxt: fix scalar Tx completion handling
  * net/bnxt: fix Tx descriptor status implementation
  * net/bnxt: fix typo in log message
  * net/bnxt: improve probing log message
  * net/bnxt: invoke device removal event on recovery failure
  * net/bnxt: remove unnecessary code
  * net/bnxt: remove unnecessary comment
  * net/bnxt: set flow error after tunnel redirection free
  * net/bnxt: set flow error when free filter not available
  * net/bnxt: use common function to free VNIC resource
  * net/bnxt: workaround spurious zero stats in Thor
  * net/bonding: check flow setting
  * net/bonding: fix error message on flow verify
  * net/ena: enable multi-segment in Tx offload flags
  * net/ena: trigger reset on Tx prepare failure
  * net/hinic/base: fix LRO
  * net/hinic: increase protection of the VLAN
  * net/hns3: fix delay for waiting to stop Rx/Tx
  * net/hns3: fix filter parsing comment
  * net/hns3: fix Tx prepare after stop
  * net/hns3: fix VLAN strip log
  * net/hns3: increase VF reset retry maximum
  * net/i40e: fix descriptor scan on Arm
  * net/i40e: fix multi-process shared data
  * net/iavf: fix RSS key access out of bound
  * net/iavf: fix Tx threshold check
  * net/ice/base: fix first profile mask
  * net/ice/base: revert change of first profile mask
  * net/ice: fix default RSS key generation
  * net/ice: fix memzone leak when firmware is missing
  * net/ixgbe: fix flow entry access after freeing
  * net/mlx5: fix incorrect r/w lock usage in DMA unmap
  * net/mlx5: fix IPIP multi-tunnel validation
  * net/mlx5: fix match MPLS over GRE with key
  * net/mlx5: fix MPLS RSS expansion
  * net/mlx5: fix overflow in mempool argument
  * net/mlx5: fix representor interrupt handler
  * net/mlx5: fix RoCE LAG bond device probing
  * net/mlx5: fix RSS flow item expansion for GRE key
  * net/mlx5: fix Rx/Tx queue checks
  * net/mlx5: fix switchdev mode recognition
  * net/mlx5: fix typo in vectorized Rx comments
  * net/mlx5: limit implicit MPLS RSS expansion over GRE
  * net/mlx5: limit inner RSS expansion for MPLS
  * net/mlx5: remove redundant operations in NEON Rx
  * net/mlx5: remove unsupported flow item MPLS over IP
  * net/mlx5: workaround drop action with old kernel
  * net/mvpp2: fix configured state dependency
  * net/mvpp2: fix port speed overflow
  * net/octeontx2: fix default MCAM allocation size
  * net/octeontx2: fix flow creation limit on CN98xx
  * net/octeontx2: use runtime LSO format indices
  * net/octeontx/base: fix debug build with clang
  * net/pfe: remove unnecessary null check
  * net/sfc: fix MAC stats lock in xstats query by ID
  * net/sfc: fix MAC stats update for stopped device
  * net/sfc: fix reading adapter state without locking
  * net/sfc: fix xstats query by ID according to ethdev
  * net/sfc: fix xstats query by unsorted list of IDs
  * net/softnic: fix connection memory leak
  * net/softnic: fix memory leak as profile is freed
  * net/virtio: fix aarch32 build
  * net/virtio: fix refill order in packed ring datapath
  * net/virtio: report maximum MTU in device info
  * power: fix namespace for internal struct
  * rib: fix max depth IPv6 lookup
  * test/crypto: fix mbuf reset after null check
  * test/crypto: fix mempool size for session-less
  * test/crypto: fix typo in AES case
  * test/crypto: fix typo in ESN case
  * test/mbuf: fix virtual address conversion
  * tests/eal: fix memory leak
  * vhost/crypto: check request pointer before dereference
  * vhost: fix crash on reconnect
  * vhost: fix missing guest pages table NUMA realloc
  * vhost: fix missing memory table NUMA realloc
  * vhost: utilize dynamic memory allocator
  * Changes from 19.11.9:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id25
- rename
  0001-SLE15-SP3-compatibility-patch-for-kni.patch
  to
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1631534400">- Fix build error with SLE15-SP4 kernel (bsc#1190362):
  0003-dpdk-fallthrough-comment-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1658145600">- aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1664366400">- added patch to fix build issue with 15 SP5 kernel (bsc#1203845)
  + 0004-kni-update-kernel-API-to-set-random-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- fix build with SLE15-SP5 kernel [bsc#1203845]
- added patches
  + 0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
  + 0006-kni-use-dedicated-function-to-set-MAC-address.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1668772800">- security update
- added patches
  fix CVE-2022-2132 [bsc#1202903], DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  + dpdk-CVE-2022-2132.patch
  fix CVE-2022-28199 [bsc#1202956], buffer overflow in the vhost code
  + dpdk-CVE-2022-28199.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677240000">-- Update to LTS release version v22.11.1
  Some of the new features are,
  * Added initial LoongArch architecture support.
  * Added support for multiple mbuf pools per ethdev Rx queue.
  * Added support for congestion management in ethdev.
  * Added protocol header based buffer split.
  * Added proactive error handling mode for ethdev.
  * Added ethdev Rx/Tx descriptor dump API.
  * Added ethdev hairpin memory configuration options.
  * Added new configuration flags for hairpin queues in rte_eth_hairpin_conf:
  * Added strict queue to pre-configuration flow hints.
  * Added configuration for asynchronous flow connection tracking.
  * Added support for queue-based async query in flow API.
  * Added new function rte_flow_async_action_handle_query() to query the action asynchronously.
  * Extended metering and marking support in the flow API.
  * Added flow offload action to route packets to kernel.
  * Updated AF_XDP driver.
  * Updated AMD Pensando ionic driver.
  * Added GVE net PMD.
  * Updated Intel iavf driver.
  * Updated Intel ice driver.
  * Added Intel idpf driver.
  * Updated Marvell cnxk driver.
  * Added Microsoft mana driver.
  * Updated Netronome nfp driver.
  * Added flow API support:
  * Updated NVIDIA mlx5 driver.
  * Updated NXP dpaa2 driver.
  * Updated Wangxun ngbe driver.
  * Added DMA vChannel unconfiguration for async vhost.
  * Added non-blocking notify API to vhost library.
  * Added support for MACsec in rte_security.
  * Added new algorithms to cryptodev.
  * Updated Intel QuickAssist Technology (QAT) crypto driver.
  * Updated Marvell cnxk crypto driver.
  * Updated aesni_mb crypto driver.
  * Updated ipsec_mb crypto driver.
  * Added UADK crypto driver.
  * Added bbdev operation for FFT processing.
  * Added Intel ACC200 bbdev driver.
  * Added eventdev adapter instance get API.
  * Added eventdev Tx adapter queue start/stop API.
  * Added event crypto adapter vectorization support.
  * Added NitroSketch in membership library.
  * Added Intel uncore frequency control API to the power library.
  * Added security performance test application.
  * Updated IPsec sample application.
  * Updated FIPS validation sample application.
  * Rewrote pmdinfo script.
  * More details can be found in
  http://doc.dpdk.org/guides/rel_notes/release_22_11.html
  * Removed the patches as fixed in upstream
    0001-kni-allow-configuring-thread-granularity.patch
    0001-usertools-read-PCI-device-name-as-UTF-8.patch
    0003-dpdk-fallthrough-comment-fixes.patch
    0004-kni-update-kernel-API-to-set-random-MAC-address.patch
    0005-kni-use-dedicated-function-to-set-random-MAC-address.patch
    0006-kni-use-dedicated-function-to-set-MAC-address.patch
    dpdk-CVE-2021-3839.patch
    dpdk-CVE-2022-0669.patch
    dpdk-CVE-2022-2132.patch
    dpdk-CVE-2022-28199.patch
  * Rebased patches:
    0001-fix-cpu-compatibility.patch
  0002-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:dpdk22 for DPDK version 22.11.1 as legacy DPDK version(v19.11.10) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove redundant obsoletes and unnecessary provides
- Remove obsoleting old dpdk package changes and let user decide.
- Add conflict for the KMP module in preamble</changelog>
  <changelog author="gyribeiro@suse.com" date="1681128000">- Rename name_tag to package_name_tag to avoid conflict with name_tag
  used multibuild</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- raise constraints to 8GB to cover SLE15 builds as well</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1716379200">- Fix [bsc#1219990] - dpdk_nic_bind ‘python’: No such file or directory
  * Add requires for "which" as dpdk-tools has its dependency</changelog>
</package>
<package pkgid="ea49fa700bdff101708ebdf6e062485d4c1d864f1e069101b9498f22174f4972" name="dwz" arch="aarch64">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="476fe2e69bf1e5daf8579666da044d45bd225b8232bd67bbfa3a3e2438f3d5fa" name="dwz" arch="ppc64le">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="bb99970fc1aa0c6d40487fe7dbde2de0d53ba26bd64ea2cc9322db37923712ef" name="dwz" arch="s390x">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="8afb33f48e338af3e383fb73d8b251d109f782477c3ce5f16db223a3b2771c0c" name="dwz" arch="src">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="2275abd9d4af34208b5a4a2eaef22840a79f87f16c4d164d88046cad05e1876d" name="dwz" arch="x86_64">
  <version epoch="0" ver="0.12" rel="150000.3.8.1"/>
  <changelog author="pth@suse.de" date="1340798400">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1418212800">- Update to new upstream version 0.11
  * fix iterative hashing on big-endian targets
  * optimize DW_FORM_data[48] DW_AT_high_pc that GCC 4.8 produces
  * fix up handling of DIE equality if more than one DIE in the same
  CU compare equal
  * check DW_FORM_ref_addr properly during fi_multifile phase
  * when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
  and DW_FORM_data4 for dwarf[23] rather than vice versa
  * handle .gdb_index version 7 and 8</changelog>
  <changelog author="rguenther@suse.com" date="1480420800">- Update to new upstream version 0.12
  * Fix up alignment of non-allocated sections and section header table
  after sections which have changed size.</changelog>
  <changelog author="rguenther@suse.com" date="1487678400">- Add dwz-0.12-ignore-nobits.patch to ignore SHT_NOBITS sections
  that are placed out-of-order by objcopy when extracting debuginfo
  and place them at sh_offset zero.</changelog>
  <changelog author="rguenther@suse.com" date="1488888000">- Adjust dwz-0.12-ignore-nobits.patch to also handle non-monotonically
  increasing sh_offset as created by the kernel linker script.</changelog>
  <changelog author="tdevries@suse.com" date="1710936000">- Add dwz-0.12-clean-up-temporary-file-in-hardlink-mode.patch to
  cleanup left-over temporary file (swo#24275, bsc#1221634).
- Replace "%doc COPYING" with "%license COPYING".</changelog>
</package>
<package pkgid="f5c4ebde2da4f4de680e555c64fd140a24f9df19b2d1c05a8e97347e54d94e91" name="fdupes" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="8a4cf4a123b911c8169fa9ba58b621872e90e3204fcbe3203e20e7d107bacc62" name="fdupes" arch="ppc64le">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="e6c83a50422017eca5b0c014f81ec4291d6e97ba25d3d41ae8430ca59b45f84a" name="fdupes" arch="s390x">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="95ead61ae2d4b8bcf8af89e2d85bd2b0207ed5782558aae86371e91243095b36" name="fdupes" arch="src">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1398772800">- sort the output of fdupes by filename to make it deterministic
  for parallel builds
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="dceac73490031613f9cf3dbd9740060a1b3ad14c23f2767cdc7b5a383fe0339e" name="fdupes" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150400.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="mcepl@suse.com" date="1587038400">- Make package building even on platforms, where _rpmmacrodir
  is not defined.</changelog>
  <changelog author="info@paolostivanin.com" date="1590148800">- Update to v2.0.0
  * Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  * Add --minsize option.
  * Add --maxsize option.
  * Add --time option.
  * Add --order=ctime option.
  * Add --log option.
  * Use configure script for installation (Autotools/Automake).
- Remove fdupes-makefile.patch</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Use noun phrase in summary. Drop old specfile constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.1.2:
  * Do not enter ncurses mode when --immediate option given.
  * Fix logging/memory corruption bug when using --log with --immediate.
  * Break mtime ties using ctime when sorting by time.
  * Reduce number of calls to stat(), for speed.
  * Clear last command status when new command is entered.
  * Rename cs command ("clear all selections") from cs to csel.
  * Rename igs command ("invert selections") from igs to isel.
  * Add "prune" command as synonym for DELETE key.
  * Clear selections after deleting files via prune/DELETE.
  * Fix dependency issues when fdupes is configured to not use ncurses.
- build without ncurses for now until buildcycles can be solved</changelog>
  <changelog author="coolo@suse.com" date="1647086400">- Simplify macros.fdupes with a call to a C++ program that does
  the same within a fraction of a second what the shell loop did
  in many seconds (bsc#1195709)</changelog>
  <changelog author="coolo@suse.com" date="1647259200">- Handle symlinks (-s argument) correctly</changelog>
  <changelog author="coolo@suse.com" date="1647345600">- A more correct approach to creating symlinks (old bug actually):
  Do not link the files as given by fdupes, but turn them into
  relative links (it works by chance if given a buildroot, but
  fails if running on a subdirectory)
- Support multiple directories given (as glob to the macro)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1648814400">- Fixes for the new wrapper:
  * Order duplicates by name, to get a reproducible file set
    (boo#1197484).
  * Remove redundant order parameter from fdupes invocation.
  * Modernize code, significantly reduce allocations.
  * Exit immediately when mandatory parameters are missing.
  * Remove obsolete buildroot parameter
  * Add some tests for the wrapper</changelog>
  <changelog author="andrea.manzini@suse.com" date="1664712000">- update to 2.2.1:
  * Fix bug in code meant to skip over the current log file when --log option is given.
  * Updates to copyright notices in source code.
  * Add --deferconfirmation option.
  * Check that files marked as duplicates haven't changed during program execution before deleting them.
  * Update documentation to indicate units for SIZE in command-line options.
  * Move some configuration settings to configure.ac file.</changelog>
  <changelog author="mli@suse.com" date="1710763200">- Update to 2.3.0:
  * Add --cache option to speed up file comparisons.
  * Use nanosecond precision for file times, if available.
  * Fix compilation issue on OpenBSD.
  * Other changes like fixing typos, wording, etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710936000">- Do not use sqlite, as this pulls sqlite into Ring0 at no real
  benefit performance wise: the cache is not reused between runs.
  + Drop sqlite-devel BuildRequires
  + Pass --without-sqlite to configure</changelog>
</package>
<package pkgid="08ab69f6dbdc0dcb7c40a71b33db3b0b4ca7be90ba29447f63a4d9572f2404c4" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="79be71c428522fb56971c38a22c3937b5bdd1df9bd0b3a659195a05d6d00c8fa" name="ffmpeg" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="cd6a553f8658e19aa453eca884b1c02c6c81e1304f2c9659c533e1c15908ffa8" name="ffmpeg" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="7a19c697696273e7820a2f365b08d2b2335bdedf01fa04d96388a1ee9edf1aaa" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="d9d642b8f73894e7388de9c28f368e0ea25e3d6b22ef49cd595359a13f635ce9" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="8344ff75f26fdc9ffe5fcd57b18b665a935a36d67ea33ef6a2c77109d4960755" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8c735545ddd57225402fd73f42fa76641f947f925b1f32f7ae949fe364c144c8" name="ffmpeg" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="653e69fd4bb0af1ced9d7747540f433b3ee59d34453bc2d5b23cd58bcb63e431" name="ffmpeg" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0a5f03ad799d87b07515a13ccc37f713b557a1bad209b8edc2161841dddabf2a" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7b9327984b41148f8925f4e4eba28ec8e9f27d7c2e7c6ad9b4b02693b888e018" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d6192727809874fd60aa5fd6de51e404014281455df043126d8a2ea7b928a197" name="ffmpeg-4" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="aa35769cd9cfb2506316f24eb342e33881c6d15befb04c96a5ea1810959c3d8d" name="ffmpeg-4" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7a4a306e5bca1f29b4653615c0e266fc137ce9e824329553c331a9c1e64745d3" name="ffmpeg-4" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0218d9210c24e0815d1004b4e780d5005d7a9e547220eac09bbf660a696a9771" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c98546f71109505124410ec558c8cd004a2ae8595f64edc37cf2f23bed6bf10f" name="ffmpeg-4" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1e024ab9cba875c57788bd4716e2f13afab1f3dd67f27a4d128980e941cdf7cb" name="ffmpeg-4-libavcodec-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="49ebb3f008b391659a33876f83f793fd519c60296630e5a5f16841834f30087d" name="ffmpeg-4-libavcodec-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="52e1565b40dccf47ee93e17c3ea313d5b53a0ba0667a8d8995b64cf57158cbed" name="ffmpeg-4-libavcodec-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="abfc95c36d4c436601dcf27a2b95abbeb36a8e0bb1fce41dfd573164d61d7e78" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9d0ee48ad421014ae058369f8fdc57fc8f17be0543e05c13e96686785f1dd2b3" name="ffmpeg-4-libavdevice-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="44a5811d4dc915a9e83b53f6207b8bab4343f419d384738ef1b93e4342bff118" name="ffmpeg-4-libavdevice-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="68c7903ad0a5dabc65a994f81ac4c01906478a9f8fe13b662d7af0fd3171d40d" name="ffmpeg-4-libavdevice-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0cfce158e26161b157419e475c1b0d16f43fb403fef369b8b857c0dea5fb13f7" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="858687b9c23220f06be39fd7b130b4a2f26ac1c6c7b3deda99a5b99dd855d951" name="ffmpeg-4-libavfilter-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4d8408e5902391938a8754aeebb7cf46a22243a4c0681e91fc11a449ff7605c8" name="ffmpeg-4-libavfilter-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="67c9f825b452c08c8a814b76e90a448e1f48f1871b4023138f1b4b04a3452819" name="ffmpeg-4-libavfilter-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="60a508a0c39f84fc6c02fadac13a113603b4d6ce1bab3411ec483871e2e2b5db" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="812bd29df2e056572de022e86b3b0416157e70e55d277d07e54bf74ff0b5c0be" name="ffmpeg-4-libavformat-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8464fa3ee1d272859617d5febee618003e9bb37dbef169cf1c3815ad80bb2d87" name="ffmpeg-4-libavformat-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="dcff3900a6b70141189299ca2a769929c9c81166d706e0186e7d6b26bc0d40d0" name="ffmpeg-4-libavformat-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="bd873e59bf73d1cfe4189e76668e1e54435ce583c846e4a9ffadd32fd389ab67" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="38724db8601f1ee1866029ab1177969eb8346794883a199902fcdbbb3020096b" name="ffmpeg-4-libavresample-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="516584f0e3e5f8b7a2e8cab55b3472a4ca068c33f64af32af814e354de66f86d" name="ffmpeg-4-libavresample-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="53b9c8b7523b5aadac17e6261e142c16fd1947dee5fef6bd61e70eb98b2dba99" name="ffmpeg-4-libavresample-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="3fd1d772739235cac9a0840c8458d68d960d4c67f72a0ac7286fbc0c722125e3" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e63a1a91e8cb7a2337eaba7907ed3d173089b4fb40e9f0a375a210d9c6302f5b" name="ffmpeg-4-libavutil-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8635824a601af9a57416a75c5fde07ecf821c79f8e00aa82d917172415ce4d60" name="ffmpeg-4-libavutil-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="101bc89c0dac0f6bf662d7263dde9208cdfd42d1f868dc16c20f34b584870200" name="ffmpeg-4-libavutil-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="65b20eb88473554703d2a7b7dbe8717432a8fbfe01d60060b640766196e93be1" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="ee8e58326acbb8e0e9c5ecdbc0da95d0e8b65e3a30d13d1daca50c43d4ed7917" name="ffmpeg-4-libpostproc-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8b4fdda90173e2d1fa6d327469b75dfcc8a9fbbabb164f020639db2ec62227d4" name="ffmpeg-4-libpostproc-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7c6c4e0506be566cc5475ea32980a0bdad1d8bb600e9eb18b99f5e4f0a752ad6" name="ffmpeg-4-libpostproc-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="82c4782ae6b48922051a89ede69dcb378e95b158e8c5337a7896494c9046a503" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="78a78664f423113acaa153e8ba2af8a605abb1161ee509400f5d80927967b61d" name="ffmpeg-4-libswresample-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a2ed549dd0b64c47addfc024155ea2c14a44a874fe7f2131baee6ea55edbf396" name="ffmpeg-4-libswresample-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e8dd191b589c25bb66e62eafcb19ed6cdc56ea39a08a96e7047084b267a060a8" name="ffmpeg-4-libswresample-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="996f60763524615e107a83c48084c0d7e906fe74658249ba6a20e64c66c8b7d9" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="12c26eed72bd3ad8843efdde6c174b480add4e344e428ec883671d6083abb4c1" name="ffmpeg-4-libswscale-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="61b1f569c709225a81047954ae3ba270a5cb9f2c3305019ac18c935739c8a64b" name="ffmpeg-4-libswscale-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8d773bb5db52fa4eacfcd3bfe6ec6aa1eb7dafe7f9da3c0713a6d4a20b1500f5" name="ffmpeg-4-libswscale-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="54dc7b7d8823692582f47fae3fff173cce7c099adae7294392116a2e10020d1c" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b4af5bc18fa6bef94e62de56c40fe4c6a2a4917ca7d157d70b75f56b9bd4819c" name="ffmpeg-4-private-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7db007dcb79927f4c239961f012a31e404f3258b132c44ddd14d7b406dda5802" name="ffmpeg-4-private-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4c292900030f6e0b73f4c7438d92a90ae07c11a9d786730f17b95405b65ead20" name="ffmpeg-4-private-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="621c0d884160eccb15aa21b1449aab161f9d7e4c00e867cc2161b8e17cde1718" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="86679c127f09eb7ca4827fea5663bb930deca2bc2234aa488d2cd93e05fcb856" name="ffmpeg-private-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="9568e4217a0cbf37c807b1c8f811209545c33faa2510b880bca5dec977e5866b" name="ffmpeg-private-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="572ddb3078aaf8d5b83ddee8f4fe344cc46bacda94e604454ab3aba040cc4beb" name="ffmpeg-private-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c7ba4e82030d65c7a2275eb0bd099c9e3cf60f500305d99e2ebebebba5de1364" name="ffmpeg-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="95c3c46b9afbecaa72374775abe072f6471c3db03ef7c07276bbd585695998e8" name="ffmpeg-private-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="f6311cc06eec14e7fd41a33e44b97a30fde44fd4abdda6ba904f30f56351eded" name="ffmpeg-private-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="952c513e88d9beec101e933d95bad720f90b9c409973face99e94e1d6cb82128" name="ffmpeg-private-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1c81fcd688ccaece01a4fc23c9212382ca306044cd7fa4f0dfbaab4e1573fff7" name="ffmpeg-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="623f7e55764c5cf9fb9fee46a5fa47b997c2c816f9017b8d6611cc710f1da27e" name="frr" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="a59661b5815e9dbe643dad1b2619c83b51f2dce97cda1383a1ee660d0f5d9c0e" name="frr" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="fcc601f6b2fe6f43dea17ce6053226774acb07baa1e2138dde28a744177c4c90" name="frr" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="d8803af814b34286de4e157732dc1269b2b90182586a6aa38184e69fab4c2d04" name="frr" arch="src">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e263765e782b9cfc53589829fce1abe84f323cb77f0381e854b5838fd0161bba" name="frr" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="09fe360ccfad199bf9e798f8b3064f2f5c4110ee58b623908782c8bde62eae5f" name="frr-devel" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="dd77b9ad10f60f60ffffc818606e956cd22ffaa7f0422eb8318669f7606a7ceb" name="frr-devel" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="36e32ba2dc3c4a880cf11db94518e0386f96467af57321ba783b82578a82d22b" name="frr-devel" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="143650fea0189934d04bce7dbdb4c2ec2a547efdf19ebb8a6ef1a4815f5edf29" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e0667598e93deaa9cb0623c9f70e2d2751c613cee1934961e2bd6a0bc1a09c8a" name="fwupdate" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="210749fd7364c8e4cd3ccba9f47d9bda4c5c94442888b3d4abfca39249350571" name="fwupdate" arch="src">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="69b490385c8c73e29341a6e025f14138fe2c67821f43bec82a270f048c2ce685" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="3f3dca9e5bf23c6bca311941054d8401c1c786a949c742f9c09de05e150694c8" name="fwupdate-devel" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="1cc53228b8556ac1727200114c29283273365c233b1f0bb1f3f48c4cf4f65cca" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="81d6f0a13d6f145ff9c924924d0ee433b14993335a802d5b1f4fb28d3171aecd" name="fwupdate-efi" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="386735e3cdd811477eeeed376597d9a01f20aa7c4fc3a1ecae63354c6ee3e40c" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="c801215c6c4a988d76bd7421b74daf078102307594083743758454435d5911f1" name="gettext-its-gtk4" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="e7eddf9d95cb41f08ebec5927c1ffadde92994a550d362cd04185f6218f0cbda" name="gettext-its-gtk4" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="3a23bf8f85f0093f1183e6775db95c91ffd3a2c2538866c61835ff16309268ca" name="gettext-its-gtk4" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="2ebfb1d641512fd393433f2846d4e677417b5347151e5d9c217ca80587a673a0" name="gettext-its-gtk4" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="d630223e17f0f2ee0d048353894897c729870cf2825c78f7b58f1ac7e9a556e6" name="gio-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="150600.35.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513944000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop (for GNOME 3.28).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530273600">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
  <changelog author="dimstar@opensuse.org" date="1541592000">- Update gnome_defaults: evince.desktop has been renamed to
  org.gnome.Evince.desktop with GNOME 3.30.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572264000">- Fix keyassignment for help: the schema was changed to array of
  strings, as multiple keys can now be bound.</changelog>
  <changelog author="mgorse@suse.com" date="1572350400">- Add super+f1 key binding for help to match GNOME default.</changelog>
  <changelog author="qkzhu@suse.com" date="1578398400">- Update .gschema.override.in:
  + Delete unused settings-daemon.plugins.power keys.
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for SLE to be consistent with old versions (bsc#1158497).</changelog>
  <changelog author="qkzhu@suse.com" date="1584100800">- Update .gschema.override.in:
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for Leap to be consistent with SLE and old versions (bsc#1158497).</changelog>
  <changelog author="dimstar@opensuse.org" date="1589803200">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
  <changelog author="fcrozat@suse.com" date="1600430400">- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1602417600">- Add priority of 20 to gschema override, otherwise you can't
  override it</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update for libreoffice-* desktop files no longer dropping the
  libreoffice- prefix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.</changelog>
  <changelog author="yfjiang@suse.com" date="1647345600">- Update .gschema.override.in: Change default libreoffice startup
  entry to libreoffice-startcenter.desktop according to the
  libreoffice update (bsc#1195836, bsc#1196951).</changelog>
  <changelog author="milachew@mail.lv" date="1666008000">- Fix default openSUSE wallpaper is not present in dark mode (boo#1204138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1669896000">- Adjust desktop file names of preferred applications:
  + evince.desktop =&gt; org.gnome.evince.desktop (since GNOME 3.30).
  + eog.desktop =&gt; org.gnome.eog.desktop (since GNOME 3.36).
  + file-roller.desktop =&gt; org.gnome.FileRoller.desktop
- Fix name to impress: libreoffice-impress.destop.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Prefer file-roller over nautilus for archives.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681905600">- prefer org.gnome.TextEditor.desktop instead of gedit.
  patterns-gnome was changed to install TextEditor (boo#1210648).</changelog>
</package>
<package pkgid="f1ca329e25d7b31d4b9b5cd36b934e6045a261b2762a5c5db3bfbff35bfe0125" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="78e20038bbf4a8bf3902f87ee440a72cd5c7bd1fc6542733c0e5a98155f4e5ff" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="f92d37b2109807de6e00f269c2aadeec29e999bcba316a96d8f5e10c6f690c33" name="glib2-branding-SLE" arch="src">
  <version epoch="0" ver="15" rel="150600.35.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513944000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop (for GNOME 3.28).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530273600">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
  <changelog author="dimstar@opensuse.org" date="1541592000">- Update gnome_defaults: evince.desktop has been renamed to
  org.gnome.Evince.desktop with GNOME 3.30.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572264000">- Fix keyassignment for help: the schema was changed to array of
  strings, as multiple keys can now be bound.</changelog>
  <changelog author="mgorse@suse.com" date="1572350400">- Add super+f1 key binding for help to match GNOME default.</changelog>
  <changelog author="qkzhu@suse.com" date="1578398400">- Update .gschema.override.in:
  + Delete unused settings-daemon.plugins.power keys.
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for SLE to be consistent with old versions (bsc#1158497).</changelog>
  <changelog author="qkzhu@suse.com" date="1584100800">- Update .gschema.override.in:
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for Leap to be consistent with SLE and old versions (bsc#1158497).</changelog>
  <changelog author="dimstar@opensuse.org" date="1589803200">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
  <changelog author="fcrozat@suse.com" date="1600430400">- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1602417600">- Add priority of 20 to gschema override, otherwise you can't
  override it</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update for libreoffice-* desktop files no longer dropping the
  libreoffice- prefix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.</changelog>
  <changelog author="yfjiang@suse.com" date="1647345600">- Update .gschema.override.in: Change default libreoffice startup
  entry to libreoffice-startcenter.desktop according to the
  libreoffice update (bsc#1195836, bsc#1196951).</changelog>
  <changelog author="milachew@mail.lv" date="1666008000">- Fix default openSUSE wallpaper is not present in dark mode (boo#1204138).</changelog>
  <changelog author="dimstar@opensuse.org" date="1669896000">- Adjust desktop file names of preferred applications:
  + evince.desktop =&gt; org.gnome.evince.desktop (since GNOME 3.30).
  + eog.desktop =&gt; org.gnome.eog.desktop (since GNOME 3.36).
  + file-roller.desktop =&gt; org.gnome.FileRoller.desktop
- Fix name to impress: libreoffice-impress.destop.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Prefer file-roller over nautilus for archives.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681905600">- prefer org.gnome.TextEditor.desktop instead of gedit.
  patterns-gnome was changed to install TextEditor (boo#1210648).</changelog>
</package>
<package pkgid="f1b271a8b3a3fe31f79cec29487ef768e7b2d297da4df9e26527a81b68147878" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="5c333f98ffaeb5abc0532f863839855f35fe22174eb467b156d1bf9a2cc661e9" name="glib2-devel" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="e722d25b3a2f9042843ea8584689646ad553c9bfd902a0b9c82941c570c67ec4" name="glib2-devel" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a3685e86678aec8748b984afe2126b0e7bbf6cb9faea0035ca4b7efab5298c88" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a891392e48bc0c267f90623d3a54a23e0ae42caf3f91186e08e43bc51d8b1d62" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a66d645463ac00928b2660b5dbdc971b682baa7c82147d38f877392ac9afcde5" name="glib2-devel-static" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="03a83cb5132964221f741581068f98f3397cc3c32c94dfe96657811558b9e1bd" name="glib2-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="ad63841ad7a30f5696d114c92565bb52b9a39ada9ba555e4051bbfedd86e208d" name="glib2-devel-static" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="2c694684f36d65dc72a76e43124e9dc9e6df1dcf475810f292b8a6a9ee69bf2f" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="ffe1a8a9b50fa0f1ae64fecf66956692e039db9193201c0a7cdc22b6436b5a49" name="glib2-doc" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="751823438052b2a6dbe500feb0e2c53710c6db24be66519375f0a6fd3a06162e" name="glib2-doc" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="2bff44c68b529724ba51fdd8b3b33fa6179f80965b006a130d6bc813f8cb47b3" name="glib2-doc" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7a66ab3eadd698cdef95c79dd9cd3c7249163b31f8037bf470a96d69beb90c80" name="glib2-doc" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="b3cc63cc5af72c08c1d0c900bd528a9b949468a1e2873867c1dfb79fa9dbf876" name="glib2-doc" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="1d67a2e4a3a8022ed274e25b3cf4e1320a91ffe120bd7054342f560d3123c9d9" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="135342c223e1e625cd02ccc70f929954e6115b5084d161cada52bda112bbb6f2" name="glib2-tests-devel" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="fd0f02bbc766c3bfc5492a590c54353a03f126ade3d89878f684c8d9817ed251" name="glib2-tests-devel" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="8fcc0e23afe19f9aebb5ada142ffb896ebc670b624456ac94de29ba02e169237" name="glib2-tests-devel" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="60c696ba2108610865f76f498f6badc67b2a8889feec35432e27af6bb3e46590" name="glib2-tests-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="a995cfdbab8eb6b26d89430b3bcf54aff850628b97b82faf7fe55aa1f57d7168" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="85cadf8b5e70db2cfb2824a9844302473396c46a2a6daa060fe8126d8bffed26" name="glib2-tools" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7bab21b1bbaf24244c691ff374f76b83968b1bed7943fa0c80a57150ecc7eb30" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="b28895269fdf0c32c9f2837efc71a67a480b92736d24d4a17e1a730e7d6a6807" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7941605a0f1eaf862b082ff6ddb594c0ebc888326aacc7234484d21415d59969" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="d093f3bef5c2fa87b2028f42229a510a3e94445fc9c61e9e6a351e7bec23c342" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="004f87319db857d8a34f2d5a7ebc269263a2cbf4fa1d83844bb14f3d6943dff1" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="8aa2ec60ea7c88aa95d0c8cdc6ce4677e37613e8cd8a5054997d969e34ffe23d" name="glibc" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="c944bf02746074fe33d613eb561134dbb3d27ce9d523c1cd6b7303e990feefad" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="29e3d76e1c9c871686d1a3cb4c7cb1eeb142e710dd2d0fa06e74159c83837a59" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="8986e50ef6045d5e26c4d6799b25d60eb1f150c47716b705fda387308c6a72df" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="7af237877570b7795aa8fb3bd37a83b0c5d89a9f23a55d579283f69c9c4ae54f" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="02f944fd4763418258c478c3cab91bb1198eb6eccc1c5e9953f82a46ab5c3179" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="3bbcabb3a4b1aca58ceb59746a42b026e4b72752fed9066bf7c7d0a292d2e3b2" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="fa8a5fd84caf08a0338ca6c951ebd79951a4c98ebfec3376c3c895a6faf3f92e" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="46ad461f0b0691fcb35a2396b9d2382e20dc946f3ace1f39c4d963184068e75d" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="a9c043b23f80dcd10270c468c10d6e471ddd9892656b5b20e08f77045d2e09c5" name="glibc-devel-static" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0731d0ca4e790339b72229995457d2d69e0759729ebe414d78d1ee00a0d44699" name="glibc-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="d3d33fa0cc8ab0582fdba584096834e091b3d1fcf18383a90ffb5c2e882fddad" name="glibc-devel-static" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="71f9dcc04c4989973de580ae8826676b4737a3dc8b251075e8d29436f74632f6" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="72a48b953cdbd09c9047eb48707084576924d2a7136c61c60ccdbe6c905d5081" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="a8a43daa8685a0608a0f07366e280b0b6b533c2fe0b0a7bd63a78ad4234bf513" name="glibc-extra" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4def86911cc2176a997499dddbd76ddf9ba18af9e631fc091b3b8b262472449d" name="glibc-extra" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="21cad1e2ea6475bfa779d5872f66dbe2a55fe2495760360fc7b16ce001e7e74a" name="glibc-extra" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e63806b238550ca9e92d207e456323bc5cd5b87231210326ed76cf07246295a8" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="71f7634f854cd9823b13ce378ccbd598c551bd7d8a052337873f0f24ce67f216" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="f4853628ca60d29725cdbbfe26e852f9426adafdd3140af08c45970aa30f756f" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="3625ede73fe018ee6dcd903dc2f8b2725ca279c85dc9752f1ef8c6ede3c3fcaa" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e8b47b35e8a62a3736ffd5585954a1776a440442abd1e2420c2b81dff44f8b6f" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="5332cf24e454c85513d2dee81cde0f3de927fd2fd5cb98d439e81bb7da3df369" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="dda97f40b2dd2580dc843cbeab5f02ee2336dffd5c182832a87ea5f17aed0e63" name="glibc-locale" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="fb0ac08f6219f97ec490af5704543dd5fe27dab04a187f89521623376cc88b11" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="204c1995f22fa6c1009f5bcae60cb1e8e7136449cec98ae2a5bf42a10e90ae07" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0900a90128c70d07dcf9b95400826016b9114f8cbdd28911ae50623e8b484f72" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4c6982c59e5f27d9c977e9e105725107b9a4e7655f38231dc174153b86587ddd" name="glibc-locale-base" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="0f8d46bafe6651be3a0e189b6793284965feb4663177c87c1792be06f5c8d241" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="481858bf8a4b6f83f340197198e8913922e56f9bf94679aa85025386350fca1e" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="7b8691cf09199381213d3cdd9a774b51669e4cc6eb57b6de51449815b5ffcef4" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="9b90b7b45d0bc09bec923da33f44ca3d9ec6c9ab44c81cbca49446228b7c3e70" name="glibc-profile" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="70d4523183e11ce9ce780dad8daa35d6a652fb556fe5b3debc25d329bfe957c2" name="glibc-profile" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="05c23acf064f1a7f603b3e23e5ba3f4e81c7587599dfa7f2511d482ec086e170" name="glibc-profile" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="819ef10d78b37d35160ca6e0f36d3b1752f399e1d450545c61a41a0fd5f3a131" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="b855972e6fed5dfab085ac1cc0072045a06cda26fe1ebb91c761f7b91d6b8554" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="593c26559bcc56324c7b2bafb8d7034f14954add853e2e4d244f7ce8bb3c89ae" name="glibc-utils" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="448ee46731b380bfbf1ce2a43ca561ff27b3cf26660e9d3fa18e81ecde84145f" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="185068439e98631e0b07e77292794dd99f3a2d58f86971b68135293fc1dfcbd5" name="glibc-utils" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="2f32bd4737d467f6394e9c393ed0ee9c0481d17243574d40b63169de05afb4f0" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="ef3c2c7718c4d46f954961834d37d4f2380cf1bcc5a7b9d75f126c5fd5f00d65" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="aa941ad1d9fb58ddea27e948111daa02ed80302277dc23a49a27ed137006cdb3" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="f4e869cd3f156bc55c37216f5aa0e59af8f5256b5061234a1c419a03951599e8" name="gnome-control-center" arch="aarch64">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="6248f48f35b64b4284b3f827c3b6fda4abb5360983065a0530d61768ce1e4b1c" name="gnome-control-center" arch="ppc64le">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="86cc0084874f4ff6f6a292a6a0253263d2c813a8cd670485d3dd9b734a533694" name="gnome-control-center" arch="s390x">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="e061865a25deae51c87dbaed98de821e32624c5008f345214594ec70ce6b8af5" name="gnome-control-center" arch="src">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="8d763505aba2638adbe9bf921b3009b585e62bc5d1db8164a5283ac98f1cfa7a" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="d0dd9ff23bb19e2e9691874ebac30f5a75a63230d0290463e6babe81d0ddf58a" name="gnome-control-center-color" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="024105c6bfbc8e235832b68394bc5c2ef67084c2040cd1c702c71be34b1870a5" name="gnome-control-center-devel" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="e9baa50d7bfa9cd043efb19046596f89041ecc4f90c267515f5e4d303eb99c4e" name="gnome-control-center-goa" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="bdcb3df5ad8bc1112238300abb5ef781cfbd33b313394382b381c41858734d6b" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="a087ffaefca30a45b903ee72754b3c4d785b429ada6cf2389cca0e739facde98" name="gnome-control-center-user-faces" arch="noarch">
  <version epoch="0" ver="45.2" rel="150600.4.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 44.1:
  + Common:
  - Update hostname only after apply is clicked.
  - Add widget name and css class to CcIllustratedRow and
    CcSplitRow.
  + Color: Do not try to access to null pointer in destruction.
  + Date &amp; Time: Fix NTP switch getting out of sync.
  + Display:
  - Allow configuring all monitors and apply settings at once.
  - Disconnect config manager changed handler.
  - Don't leak config manager proxy.
  + Network: Fix crash when removing a connection.
  + Region: Fix label of formats for the login screen.
  + Sharing: Fix network row visible name bug.
  + Shell: Add workaround to make disabled pictures are painted as
    such.
  + Sound:
  - Prevent duplicate sound device entries.
  - Revert accidental libgvc downgrade.
  + Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685102400">- Update to version 44.2:
  + Various small accessibility fixes.
  + Fixes in Gtk template usage that causes crashes on some
    systems.
  + Appearance: Clear dconf when resetting to defaults.
  + Mouse: Hide entire "Touchpad" row when touchpad cannot be
    disabled.
  + Network: Fix racy radio buttons in connection editor.
  + Users: Remove autologin row tooltip when unlocked.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688126400">- Update to version 44.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689336000">- Update to version 45.alpha:
  + Add placeholder text to various search entries
  + Set a minimum size for various dialogs
  + Make dialogs close when pressing the Escape key
  + Replace deprecated GTK4 methods with new replacements
  + Depend on snapd-glib-2 (soup3 version)
  + Accessibility improvements
  + Common:
  - Fix time entry for RTL languages
  - Use ToastOverlay
  - Show start title buttons in header bar
  - Allow more theming of rows
  - Only return to last panel if it didn't crash
  - Improvements to panel activation
  - Improvements to panel searching
  + About:
  - Show only the GNOME major version
  - Update hostname only after apply is clicked
  + Accessibility: Present the checked state on the list row itself
  + Appearance: Clear out dconf if user picks defaults
  + Applications:
  - Always use bold for app name in dialogs
  - Use header capitalization in the "No apps" AdwStatusPage
  + Color:
  - Do not try to access to null pointer in destruction
  - Dim information text &amp; fix "Learn more" link alignment
  + Date and Time:
  - Fix NTP switch getting out of sync
  - Add top bar clock and calendar switches
  - Move "Time Format" row out of "Clock" section
  - Merge "Clock" and "Calendar" sections
  + Default Apps: Don't crash when there are no apps for a mimetype
  + Device Security:
  - Skip security attributes that have been obsoleted by others
  - Ddon't translate technical report
  + Display:
  - Allow configuring all monitors and apply settings at once
  - Try snapping all the displays after a config change
  - Don't leak config manager proxy
  - Use AdwPreferencesPage
  - Fix display enabled toggle visibility
  - Fix gaps when numbering unusable displays
  - Fix stuck window subtitle
  - Fix invalid panel state after canceling changes
  - Check best_mode exist before adding flag
  + Info: Show each GPU in it's own line
  + Mouse:
  - Prevent infinite loop on settings changes
  - Do not bind sensitivity to touchpad settings
  - Simplify binding of touchpad sensitive widgets
  - Hide entire "Touchpad" row when touchpad cannot be disabled
  + Keyboard:
  - Fix cancel button issue
  - Add "Compose" and "Character" keywords
  - Add ellipsis to the "Add Shortcut" button label
  - Fix "Add Custom Shortcut" in others sections
  - Drop "Left Alt" as compose key option
  + Network:
  - Validate max length of hotspot SSID
  - Keep current mode when enabling proxy
  - Increase maximum MTU value from 10000 to 65536
  - Fix incorrect styling in WiFi list
  - Make the security status and signal strength read by screen
    readers
  - Add a confirmation dialog when forgetting a connection
  - Center panel title when subtitle isn't visible
  - Rename "Other Devices" to "Bluetooth"
  - Fix crash when importing wrong vpn file
  - Drop legacy vpn_export function
  - Close Connection Editor dialog when clicking Apply button
  - Add delete icon in saved WiFi connections list
  - Move WiFi controls out of headerbar
  + Notifications: Replace "Applications" with "App Notifications"
  + Power:
  - Label the main "battery" as UPS if that's what it is
  - Hide automatic suspend row in VM
  + Region: Fix label of formats for the login screen
  + Sharing:
  - Disable AdwActionRow markup for networks
  - Fix network row visible name bug
  - Remove global master switch
  - Fix visual bug for active indicators
  - Add icons next to each row
  - Add subtitle to each panel row
  + Sound:
  - Make bass audible on low quality hardware
  - Prevent duplicate sound device entries
  + Thunderbolt:
  - Update page to be more similar to other pages
  - Modernize Device Dialog UI
  + Usage: Fix confirmation dialog when clearing history
  + Users:
  - Remove account activity window
  - Set language-chooser to hide on close
  - Add popover explaining about the "Administrator" option
  - Add a popover describing the autologin functionality
  - Move "Add User" button out of the user listbox
  - Improve avatar crop mechanics
  - Improve rounding of avatar crop edges
  - Draw avatar crop corners to inside of crop
  + Wacom: Rename "Test Your Settings" button to "Test Settings"
  + Updated translations.
- Rebase patch with quilt, but still disable it, breaks build in
  current form, so needs reworking or possibly dropping.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 45.beta:
  + Prevent loading last-panel unconditionally on startup
  + Multiple settings rows got ported to use the AdwSwitchRow
    widget
  + Various accessibility label fixes
  + Various memory leak fixes
  + About: New About panel displaying system information in a more
    compact way
  + Applications: Fix crash when opening the Apps panel as the
    last-opened panel
  + Datetime: Add description explaining the "Clock &amp; Calendar"
    settings
  + Displays: Replace deprecated GtkComboBox with AdwComboRow
  + Keyboard:
  - Fix "Move up/down" movement options in the input list
  - Spawn "tecla" app to display the keyboard map (replaces
    gkbd-keyboard-display)
  - Fix alignment of the "Set Shorcut..." button
  + Network: Use an AdwSwitchRow widget to enable/disable Wi-Fi
  + Online Accounts:
  - Improve "offiline" message text
  - Use banner to indicate when the system is offline
  - Add panel description text and section titles
  + Sound:
  - Make output test whell smaller
  - Ellipsize long device name label
  + Printers: Use the "card" style for printer entries
  + Privacy: New Privacy panel containing all the panels under the
    Privacy category
  + Region: Fix preview buttoins in the format chooser
  + Search: Fix "Move up/down" movement options in the app search
    list
  + Users:
  - Show "Other Users" section only when there are users to show
  - Make entire panel insensitive when the user has no permission
    to make changes
  - Fix focus issues when selecting avatar image from a file
  - Fix g_critical errors when loading file metadata for avatars
- Replace gnomekbd-tools Requires with tecla-keyboard-layout-viewer
  Requires following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 45.rc:
  + About:
  - Port to AdwToolbarView
  - Make System Details window more compact
  - Port System Details window to AdwBreakpoint
  - Port System Details window to AdwToolbarView
  + Accessibility: Port to AdwToolbarView
  + Applications:
  - Make panel fit on narrow widths
  - Port deprecated GtkDialogs to AdwWindow
  + Background: Port to AdwToolbarView
  + Bluetooth: Port to AdwToolbarView
  + Color: Port to AdwToolbarView
  + Date and Time:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow
  + Default Apps: Port to AdwToolbarView
  + Display:
  - Port to AdwNavigationView and AdwtoolbarView
  - Reduce the size of the preview width
  + Keyboard:
  - Port to AdwToolbarView
  - Port keyboard shortcuts dialog to AdwNavigationView
  - Fix criticals when inpuit chooser is destroyed
  - Write to mru-sources setting if it has never been set before
  + Mouse:
  - Make adaptative
  - Port to AdwToolbarView
  - Port the test dialog to AdwToolbarView
  - Stop leaking the test window
  + Multitasking: Port to AdwToolbarView
  + Network:
  - Port to AdwNavigationView and AdwToolbarView
  - Port the Wi-Fi panel to AdwToolbarView
  - Stop leaking the hotspot dialog
  + Notifications:
  - Port to AdwToolbarView
  - Port dialog to AdwWindow and AdwToolbarView
  + Online Accounts: Port to AdwToolbarView
  + Power:
  - Port to AdwToolbarView
  - Port the suspend dialog to AdwWindow and AdwToolbarView
  + Printers:
  - Port to AdwToolbarView
  - Make the panel adaptative
  - Move search bar above the banner
  - Port dialogs to AdwWindow and AdwToolbarView
  - Fix size calculation for normalized printer name
  + Removable Media:
  - Port the dialog to AdwWindow
  - Port to AdwToolbarView
  + Region: Port to AdwToolbarView
  + Search: Port to AdwToolbarView
  + Sharing:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  - Port Remote Login row to AdwSwitchRow
  + Sound:
  - Port to AdwToolbarView
  - Port dialogs to AdwWindow and AdwToolbarView
  + User Accounts:
  - Fix account type row sensitivity
  - Port to AdwToolbarView
  - Port Add User dialog from deprecated GtkDialog to AdwWindow
  - Update status page text when no accountsservice is available
  - Show label when another user is logged in
  - Port error message dialogs to AdwToasts
  - Port deprecated GtkMessageDialogs to AdwMessageDialog
  - Add "loading" page at startup
  + Wacom: Port to AdwToolbarView
  + WWAN: Port to AdwToolbarView
- Pass tests=false to meson, we are not running tests, so lets not
  build them either (avoids a dependency on setxkbmap).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 45.0:
  + Fix panel list (sidebar) issues with panel centering
  + Use g_printeer to message when running in non-supported
    environments
  + About:
  - Fix issue with system details label having the "selected"
    state
  - Allow system details labels to span multiple lines
  + Accessibility: Fix issue when icon theme changes to
    HighContrast can't be reverted
  + Keyboard: Fallback to subproject when keyboard previewer
    (tecla) is not available
  + Network:
  - Fix criticals when updating connection
  - Don't try to update device if it doesn't exist
  - Don't show QR Code button for wifi connections using
    unsupported security methods
  + Online Accounts: Add line-breaks to log messages
  + Search: Fix crash when selecting folder in "Other Search"
    locations
  + Users: Allow new password insert if the old one is right
- Add explicit pkgconfig(tecla) BuildRequires: New dependency.
- Switch service and tarball produced to zst compression.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1695384000">- Add gnome-control-center-add-user-button.patch:
  Show add user button when user is a normal user
  (bsc#1215556 glgo#GNOME/Settings!1927).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 45.0+34:
  + network: fix editing connections without a device (boo#1215651)
  + mouse: Fix linked style of primary mouse button in RTL
  + privacy: Fix crash in the firmware security page
  + data:
  - Fix label string
  - Add missing wireguard-peer.ui to POTFILES.in
  - Mark translatable strings yes
  + info-overview: Add more types of processor support
  + Updated translations.
- Switch to git checkout from stable branch, use explicit commit.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1697112000">- Add gnome-control-center-network-fix-nmce-popup.patch:
  network-connection-editor: Close the editor when nm-connection-editor
  exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698062400">- Update to version 45.1:
  + About: Add more types of processor support
  + Accessibility: Make Cursor Size dialog close on Escape key
  + Keyboard: Allow closing Shortcuts dialog with Escape key
  + Mouse:
  - Fix linked style of primary mouse button in RTL languages
  - Avoid making videos blurry
  + Network:
  - Fix editing connections without a device
  - Revert "Disable DNS entry if automatic DNS option is enabled"</changelog>
  <changelog author="sckang@suse.com" date="1698408000">- Rebase gnome-control-center-disable-error-message-for-NM.patch,
  gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699876800">- Update to version 45.1+14:
  + user-accounts: Sync lock tooltip for the Avatar
  + privacy: Fix crash from free bug in cc-camera-page
  + default-apps: Workaround AdwComboRow item selection at startup
  + network-connection-editor: Align Routes labels
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701000000">- Update to version 45.1+22:
  + apps: Fix status page glitch on initialization
  + po: Fix missing closing tag in pt_BR locale
  + background: Improve preview performance
  + applications: Fix File &amp; Link Associations UI
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701864000">- Mark gnome-control-center-info-fix-distro-logo.patch as rebase
  needed. The patch needs a deeper review because its base is too
  old and SLE/Leap specific.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 45.2:
  + Apps:
  - Fix status page glitch on initialization
  - Fix "File and Link Association" interface not reflecting
    changes
  + Background: Improve background preview and chooser performance
  + Default Apps: Fix undesired resetting of default apps during
    startup
  + Mouse: Fix interference issue with scroll event in Mouse Test
    window
  + Network:
  - Close network editor when using non-native
    nm-connection-editor
  - Show decoration buttons on empty-state (no network device
    found page)
  - Share WPA3 (SAE) networks with QR Code
  - Hide QR Code icon when connection is not successful
  - Remove deprecated 'wpa-none'
  - Fix route label alignments
  + Privacy:
  - Fix crash from free bug in the Camera page
  - Fix potential crash on Bolt page visibility
  + Region: Show preview measurement format in current locale
  + Sound: Update mute state when setting mixer control for a
    stream
  + Users: Show tooltip information for the Avatar widget
- Drop gnome-control-center-network-fix-nmce-popup.patch: Fixed
  upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704369600">- Add gnome-control-center-fix-region-preview-crash.patch:
  nl_langinfo's returned pointer could be invalid after switching
  locale, so we have to save the result before switch locale to
  prevent the crash (bsc#1218528,
  glgo#GNOME/gnome-control-center!2122).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1712577600">- Add gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch:
  Avoid emitting the time-changed signal
  (bsc#1222149, bsc#1221799, glgo#GNOME/gnome-control-center#2943).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Update gnome-control-center-disable-error-message-for-NM.patch:
  Add info page to toolbar view instead of navigation page to
  prevent hiding close button (bsc#1222099).</changelog>
</package>
<package pkgid="62d1d8b97a9f98ee0bbc4bf01e1699c289f47a0a15ffcab12c910f7054a033b4" name="go1.21" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="d6aa6928a9102267bac92f78a80aabe741cb5ad25772561b9ed183af0d5c01db" name="go1.21" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="58a5678203b9bd3cd4999a0b677927a1f777460f363a50955ca1433338e73e2a" name="go1.21" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="a4e5f737e1c7cf21b1a050e4bbc908c9d78862b925f2cc079ea6f39943b602c8" name="go1.21" arch="src">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="84ebbff958f1d880e66c8e92fab9f6204615c326b79b96d5d11ee8531eb224ce" name="go1.21" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b0a285aa796ded4e24aaeff45b161ccb28ba71564bec464711c3a0840ef8fcbc" name="go1.21" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="2ca7cf3ad823faba6bb3c913322809f0b35c2352ec15089e2a3848b422195c07" name="go1.21" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="981bd378e3c32d758087ac994d0cab16f7ef7cce520222dcd4c5a424a8b969d1" name="go1.21" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="d90bca356a620a74c7bbb60dd701d6459f138a6d5fe8090b8c4946bca400a6ca" name="go1.21" arch="src">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="13737517004f540194426d6d7f7fec74292c12d05ad76d6ae2052cf169bd8886" name="go1.21" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="af8020895eea15a27093b14e433d0ddf41fae92e8664d5cdbb91e1b20d77395e" name="go1.21-doc" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="273f3b307b60acc4a1b0c141ddfff8a1db6f28442d3c4a3c4fd7677dd0fa5113" name="go1.21-doc" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b760ef4163c98b4b5e5eba2b95bb8e238d53a34d27e518f516c41688b502f682" name="go1.21-doc" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="ebe00a29f5782810d7059d40931aa5ae864230a01fd2d181af40b60143206741" name="go1.21-doc" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="43b158a39770c7e1c622c1607bcf8187da2f12ded1d6905fa7ee0ec486bd7fa4" name="go1.21-doc" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="845c2d4f415f6ca5c47fbbe05bf1584679a826584319903a49b56e4f627f14da" name="go1.21-doc" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="2b4f288c159498ca6174c8602a6a4586923d9ae70412d9d1f968f657087ad3dc" name="go1.21-doc" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="c6441b45e9a762d5f90f021ecddec8e5a75137e3fbe5cc56fa5a6cb69905809f" name="go1.21-doc" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="e9624897d0a61cd083a3f6db7b2326c5372085aa7f8621ffa03ef237be204260" name="go1.21-race" arch="aarch64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="5b207cce4a0bfe0700fd2e3dd013ed597a47d81cb8c0d79af16fc9847ebf6446" name="go1.21-race" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b95045d2d85939daa1f8cf6c371d2685bca67877045a22bdd57f2795a38031bb" name="go1.21-race" arch="s390x">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="3648570b0a064dd6fc40faef002ee887a7157075f97d9a9631499d27d4daf5b5" name="go1.21-race" arch="x86_64">
  <version epoch="0" ver="1.21.10" rel="150000.1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1686916800">- go1.21rc1 (released 2023-06-16) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc1.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="876ff2764f63e917f78ace5a471e596ec000af44f2eada5637b6d198b1430ec7" name="go1.21-race" arch="aarch64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="1368a7dcaafb11ba1ea74483806c30e3fb73abe619464fd99e2d6857e353f6a4" name="go1.21-race" arch="ppc64le">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="fcbc6e0a5fc7faa4b70b1b1702fc470d72cb433e35019e886c652b32bd05c849" name="go1.21-race" arch="s390x">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="02d7748fff0f7f194c0f7262847a1f24774910f88b1ff9d6f25eb9599a622b2a" name="go1.21-race" arch="x86_64">
  <version epoch="0" ver="1.21.11" rel="150000.1.36.1"/>
  <changelog author="jkowalczyk@suse.com" date="1687348800">- go1.21rc2 (released 2023-06-21) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc2. https://go.dev/blog/go1.21rc
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521600">- Add missing go.env to package. go.env sets defaults including:
  GOPROXY GOSUMDB GOTOOLCHAIN
  Refs boo#1212667
  * Starting in go1.21+ a missing go.env defaults to GOPROXY=''
    resulting in errors e.g. with online cmds e.g. go mod download:
    "GOPROXY list is not the empty string, but contains no entries"
    It is not clear why GOPROXY='' is not evaluated as "the empty
    string".</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687521601">- go1.21+ change default GOTOOLCHAIN=auto to local to prevent go
  tool commands from downloading upstream go1.x toolchain binaries
  Refs boo#1212669
  * go1.21+ introduce new default behavior that can download
    additional versions of go1.x toolchain binaries built by
    upstream. See https://go.dev/doc/toolchain for details. The go
    tool would attempt toolchain downloads as needed to satisfy a
    minimum go version specified in go.mod of the program
    containing main() or any of its dependencies.
  * Builds in OBS can not access the network, download attempts
    would fail.
  * Builds in OBS should not use third party binary toolchains.
  * When GOTOOLCHAIN is set to local, the go command always runs
    the bundled Go toolchain.
  * Users can override the default GOTOOLCHAIN setting with
    go env -w, stored in in ~/.config/go/env.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- go1.21rc3 (released 2023-07-14) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc3.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690977600">- go1.21rc4 (released 2023-08-02) is a release candidate version of
  go1.21 cut from the master branch at the revision tagged
  go1.21rc4.
  Refs boo#1212475 go1.21 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691496000">- go1.21 (released 2023-08-08) is a major release of Go.
  go1.21.x minor releases will be provided through August 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.21 arrives six months after go1.20. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1212475 go1.21 release tracking
  * Go 1.21 introduces a small change to the numbering of
    releases. In the past, we used Go 1.N to refer to both the
    overall Go language version and release family as well as the
    first release in that family. Starting in Go 1.21, the first
    release is now Go 1.N.0. Today we are releasing both the Go
    1.21 language and its initial implementation, the Go 1.21.0
    release. These notes refer to "Go 1.21"; tools like go version
    will report "go1.21.0" (until you upgrade to Go 1.21.1). See
    "Go versions" in the "Go Toolchains" documentation for details
    about the new version numbering.
  * Language change: Go 1.21 adds three new built-ins to the
    language.
  * Language change: The new functions min and max compute the
    smallest (or largest, for max) value of a fixed number of given
    arguments. See the language spec for details.
  * Language change: The new function clear deletes all elements
    from a map or zeroes all elements of a slice. See the language
    spec for details.
  * Package initialization order is now specified more
    precisely. This may change the behavior of some programs that
    rely on a specific initialization ordering that was not
    expressed by explicit imports. The behavior of such programs
    was not well defined by the spec in past releases. The new rule
    provides an unambiguous definition.
  * Multiple improvements that increase the power and precision of
    type inference have been made.
  * A (possibly partially instantiated generic) function may now be
    called with arguments that are themselves (possibly partially
    instantiated) generic functions.
  * Type inference now also considers methods when a value is
    assigned to an interface: type arguments for type parameters
    used in method signatures may be inferred from the
    corresponding parameter types of matching methods.
  * Similarly, since a type argument must implement all the methods
    of its corresponding constraint, the methods of the type
    argument and constraint are matched which may lead to the
    inference of additional type arguments.
  * If multiple untyped constant arguments of different kinds (such
    as an untyped int and an untyped floating-point constant) are
    passed to parameters with the same (not otherwise specified)
    type parameter type, instead of an error, now type inference
    determines the type using the same approach as an operator with
    untyped constant operands. This change brings the types
    inferred from untyped constant arguments in line with the types
    of constant expressions.
  * Type inference is now precise when matching corresponding types
    in assignments
  * The description of type inference in the language spec has been
    clarified.
  * Go 1.21 includes a preview of a language change we are
    considering for a future version of Go: making for loop
    variables per-iteration instead of per-loop, to avoid
    accidental sharing bugs. For details about how to try that
    language change, see the LoopvarExperiment wiki page.
  * Go 1.21 now defines that if a goroutine is panicking and
    recover was called directly by a deferred function, the return
    value of recover is guaranteed not to be nil. To ensure this,
    calling panic with a nil interface value (or an untyped nil)
    causes a run-time panic of type *runtime.PanicNilError.
    To support programs written for older versions of Go, nil
    panics can be re-enabled by setting GODEBUG=panicnil=1. This
    setting is enabled automatically when compiling a program whose
    main package is in a module with that declares go 1.20 or
    earlier.
  * Go 1.21 adds improved support for backwards compatibility and
    forwards compatibility in the Go toolchain.
  * To improve backwards compatibility, Go 1.21 formalizes Go's use
    of the GODEBUG environment variable to control the default
    behavior for changes that are non-breaking according to the
    compatibility policy but nonetheless may cause existing
    programs to break. (For example, programs that depend on buggy
    behavior may break when a bug is fixed, but bug fixes are not
    considered breaking changes.) When Go must make this kind of
    behavior change, it now chooses between the old and new
    behavior based on the go line in the workspace's go.work file
    or else the main module's go.mod file. Upgrading to a new Go
    toolchain but leaving the go line set to its original (older)
    Go version preserves the behavior of the older toolchain. With
    this compatibility support, the latest Go toolchain should
    always be the best, most secure, implementation of an older
    version of Go. See "Go, Backwards Compatibility, and GODEBUG"
    for details.
  * To improve forwards compatibility, Go 1.21 now reads the go
    line in a go.work or go.mod file as a strict minimum
    requirement: go 1.21.0 means that the workspace or module
    cannot be used with Go 1.20 or with Go 1.21rc1. This allows
    projects that depend on fixes made in later versions of Go to
    ensure that they are not used with earlier versions. It also
    gives better error reporting for projects that make use of new
    Go features: when the problem is that a newer Go version is
    needed, that problem is reported clearly, instead of attempting
    to build the code and instead printing errors about unresolved
    imports or syntax errors.
  * To make these new stricter version requirements easier to
    manage, the go command can now invoke not just the toolchain
    bundled in its own release but also other Go toolchain versions
    found in the PATH or downloaded on demand. If a go.mod or
    go.work go line declares a minimum requirement on a newer
    version of Go, the go command will find and run that version
    automatically. The new toolchain directive sets a suggested
    minimum toolchain to use, which may be newer than the strict go
    minimum. See "Go Toolchains" for details.
  * go command: The -pgo build flag now defaults to -pgo=auto, and
    the restriction of specifying a single main package on the
    command line is now removed. If a file named default.pgo is
    present in the main package's directory, the go command will
    use it to enable profile-guided optimization for building the
    corresponding program.
  * go command: The -C dir flag must now be the first flag on the
    command-line when used.
  * go command: The new go test option -fullpath prints full path
    names in test log messages, rather than just base names.
  * go command: The go test -c flag now supports writing test
    binaries for multiple packages, each to pkg.test where pkg is
    the package name. It is an error if more than one test package
    being compiled has a given package name.]
  * go command: The go test -o flag now accepts a directory
    argument, in which case test binaries are written to that
    directory instead of the current directory.
  * cgo: In files that import "C", the Go toolchain now correctly
    reports errors for attempts to declare Go methods on C types.
  * runtime: When printing very deep stacks, the runtime now prints
    the first 50 (innermost) frames followed by the bottom 50
    (outermost) frames, rather than just printing the first 100
    frames. This makes it easier to see how deeply recursive stacks
    started, and is especially valuable for debugging stack
    overflows.
  * runtime: On Linux platforms that support transparent huge
    pages, the Go runtime now manages which parts of the heap may
    be backed by huge pages more explicitly. This leads to better
    utilization of memory: small heaps should see less memory used
    (up to 50% in pathological cases) while large heaps should see
    fewer broken huge pages for dense parts of the heap, improving
    CPU usage and latency by up to 1%.
  * runtime: As a result of runtime-internal garbage collection
    tuning, applications may see up to a 40% reduction in
    application tail latency and a small decrease in memory
    use. Some applications may also observe a small loss in
    throughput. The memory use decrease should be proportional to
    the loss in throughput, such that the previous release's
    throughput/memory tradeoff may be recovered (with little change
    to latency) by increasing GOGC and/or GOMEMLIMIT slightly.
  * runtime: Calls from C to Go on threads created in C require
    some setup to prepare for Go execution. On Unix platforms, this
    setup is now preserved across multiple calls from the same
    thread. This significantly reduces the overhead of subsequent C
    to Go calls from ~1-3 microseconds per call to ~100-200
    nanoseconds per call.
  * compiler: Profile-guide optimization (PGO), added as a preview
    in Go 1.20, is now ready for general use. PGO enables
    additional optimizations on code identified as hot by profiles
    of production workloads. As mentioned in the Go command
    section, PGO is enabled by default for binaries that contain a
    default.pgo profile in the main package directory. Performance
    improvements vary depending on application behavior, with most
    programs from a representative set of Go programs seeing
    between 2 and 7% improvement from enabling PGO. See the PGO
    user guide for detailed documentation.
  * compiler: PGO builds can now devirtualize some interface method
    calls, adding a concrete call to the most common callee. This
    enables further optimization, such as inlining the callee.
  * compiler: Go 1.21 improves build speed by up to 6%, largely
    thanks to building the compiler itself with PGO.
  * assembler: On amd64, frameless nosplit assembly functions are
    no longer automatically marked as NOFRAME. Instead, the NOFRAME
    attribute must be explicitly specified if desired, which is
    already the behavior on other architectures supporting frame
    pointers. With this, the runtime now maintains the frame
    pointers for stack transitions.
  * assembler: The verifier that checks for incorrect uses of R15
    when dynamic linking on amd64 has been improved.
  * linker: On windows/amd64, the linker (with help from the
    compiler) now emits SEH unwinding data by default, which
    improves the integration of Go applications with Windows
    debuggers and other tools.
  * linker: In Go 1.21 the linker (with help from the compiler) is
    now capable of deleting dead (unreferenced) global map
    variables, if the number of entries in the variable initializer
    is sufficiently large, and if the initializer expressions are
    side-effect free.
  * core library: The new log/slog package provides structured
    logging with levels. Structured logging emits key-value pairs
    to enable fast, accurate processing of large amounts of log
    data. The package supports integration with popular log
    analysis tools and services.
  * core library: The new testing/slogtest package can help to
    validate slog.Handler implementations.
  * core library: The new slices package provides many common
    operations on slices, using generic functions that work with
    slices of any element type.
  * core library: The new maps package provides several common
    operations on maps, using generic functions that work with maps
    of any key or element type.
  * core library: The new cmp package defines the type constraint
    Ordered and two new generic functions Less and Compare that are
    useful with ordered types.
  * Minor changes to the library: As always, there are various
    minor changes and updates to the library, made with the Go 1
    promise of compatibility in mind. There are also various
    performance improvements, not enumerated here.
  * archive/tar: The implementation of the io/fs.FileInfo interface
    returned by Header.FileInfo now implements a String method that
    calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.FileInfo interface
    returned by FileHeader.FileInfo now implements a String method
    that calls io/fs.FormatFileInfo.
  * archive/zip: The implementation of the io/fs.DirEntry interface
    returned by the io/fs.ReadDirFile.ReadDir method of the
    io/fs.File returned by Reader.Open now implements a String
    method that calls io/fs.FormatDirEntry.
  * bytes: The Buffer type has two new methods: Available and
    AvailableBuffer. These may be used along with the Write method
    to append directly to the Buffer.
  * context: The new WithoutCancel function returns a copy of a
    context that is not canceled when the original context is
    canceled.
  * context: The new WithDeadlineCause and WithTimeoutCause
    functions provide a way to set a context cancellation cause
    when a deadline or timer expires. The cause may be retrieved
    with the Cause function.
  * context: The new AfterFunc function registers a function to run
    after a context has been cancelled.
  * context: An optimization means that the results of calling
    Background and TODO and converting them to a shared type can be
    considered equal. In previous releases they were always
    different. Comparing Context values for equality has never been
    well-defined, so this is not considered to be an incompatible
    change.
  * crypto/ecdsa: PublicKey.Equal and PrivateKey.Equal now execute
    in constant time.
  * crypto/elliptic: All of the Curve methods have been deprecated,
    along with GenerateKey, Marshal, and Unmarshal. For ECDH
    operations, the new crypto/ecdh package should be used
    instead. For lower-level operations, use third-party modules
    such as filippo.io/nistec.
  * crypto/rand: The crypto/rand package now uses the getrandom
    system call on NetBSD 10.0 and later.
  * crypto/rsa: The performance of private RSA operations
    (decryption and signing) is now better than Go 1.19 for
    GOARCH=amd64 and GOARCH=arm64. It had regressed in Go 1.20.
  * crypto/rsa: Due to the addition of private fields to
    PrecomputedValues, PrivateKey.Precompute must be called for
    optimal performance even if deserializing (for example from
    JSON) a previously-precomputed private key.
  * crypto/rsa: PublicKey.Equal and PrivateKey.Equal now execute in
    constant time.
  * crypto/rsa: The GenerateMultiPrimeKey function and the
    PrecomputedValues.CRTValues field have been
    deprecated. PrecomputedValues.CRTValues will still be populated
    when PrivateKey.Precompute is called, but the values will not
    be used during decryption operations.
  * crypto/sha256: SHA-224 and SHA-256 operations now use native
    instructions when available when GOARCH=amd64, providing a
    performance improvement on the order of 3-4x.
  * crypto/tls: Servers now skip verifying client certificates
    (including not running Config.VerifyPeerCertificate) for
    resumed connections, besides checking the expiration time. This
    makes session tickets larger when client certificates are in
    use. Clients were already skipping verification on resumption,
    but now check the expiration time even if
    Config.InsecureSkipVerify is set.
  * crypto/tls: Applications can now control the content of session
    tickets.
  * crypto/tls: The new SessionState type describes a resumable
    session.
  * crypto/tls: The SessionState.Bytes method and ParseSessionState
    function serialize and deserialize a SessionState.
  * crypto/tls: The Config.WrapSession and Config.UnwrapSession
    hooks convert a SessionState to and from a ticket on the server
    side.
  * crypto/tls: The Config.EncryptTicket and Config.DecryptTicket
    methods provide a default implementation of WrapSession and
    UnwrapSession.
  * crypto/tls: The ClientSessionState.ResumptionState method and
    NewResumptionState function may be used by a ClientSessionCache
    implementation to store and resume sessions on the client side.
  * crypto/tls: To reduce the potential for session tickets to be
    used as a tracking mechanism across connections, the server now
    issues new tickets on every resumption (if they are supported
    and not disabled) and tickets don't bear an identifier for the
    key that encrypted them anymore. If passing a large number of
    keys to Conn.SetSessionTicketKeys, this might lead to a
    noticeable performance cost.
  * crypto/tls: Both clients and servers now implement the Extended
    Master Secret extension (RFC 7627). The deprecation of
    ConnectionState.TLSUnique has been reverted, and is now set for
    resumed connections that support Extended Master Secret.
  * crypto/tls: The new QUICConn type provides support for QUIC
    implementations, including 0-RTT support. Note that this is not
    itself a QUIC implementation, and 0-RTT is still not supported
    in TLS.
  * crypto/tls: The new VersionName function returns the name for a
    TLS version number.
  * crypto/tls: The TLS alert codes sent from the server for client
    authentication failures have been improved. Previously, these
    failures always resulted in a "bad certificate" alert. Now,
    certain failures will result in more appropriate alert codes,
    as defined by RFC 5246 and RFC 8446:
  * crypto/tls: For TLS 1.3 connections, if the server is
    configured to require client authentication using
    RequireAnyClientCert or RequireAndVerifyClientCert, and the
    client does not provide any certificate, the server will now
    return the "certificate required" alert.
  * crypto/tls: If the client provides a certificate that is not
    signed by the set of trusted certificate authorities configured
    on the server, the server will return the "unknown certificate
    authority" alert.
  * crypto/tls: If the client provides a certificate that is either
    expired or not yet valid, the server will return the "expired
    certificate" alert.
  * crypto/tls: In all other scenarios related to client
    authentication failures, the server still returns "bad
    certificate".
  * crypto/x509: RevocationList.RevokedCertificates has been
    deprecated and replaced with the new RevokedCertificateEntries
    field, which is a slice of RevocationListEntry.
    RevocationListEntry contains all of the fields in
    pkix.RevokedCertificate, as well as the revocation reason code.
  * crypto/x509: Name constraints are now correctly enforced on
    non-leaf certificates, and not on the certificates where they
    are expressed.
  * debug/elf: The new File.DynValue method may be used to retrieve
    the numeric values listed with a given dynamic tag.
  * debug/elf: The constant flags permitted in a DT_FLAGS_1 dynamic
    tag are now defined with type DynFlag1. These tags have names
    starting with DF_1.
  * debug/elf: The package now defines the constant COMPRESS_ZSTD.
  * debug/elf: The package now defines the constant
    R_PPC64_REL24_P9NOTOC.
  * debug/pe: Attempts to read from a section containing
    uninitialized data using Section.Data or the reader returned by
    Section.Open now return an error.
  * embed: The io/fs.File returned by FS.Open now has a ReadAt
    method that implements io.ReaderAt.
  * embed: Calling FS.Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * errors: The new ErrUnsupported error provides a standardized
    way to indicate that a requested operation may not be performed
    because it is unsupported. For example, a call to os.Link when
    using a file system that does not support hard links.
  * flag: The new BoolFunc function and FlagSet.BoolFunc method
    define a flag that does not require an argument and calls a
    function when the flag is used. This is similar to Func but for
    a boolean flag.
  * flag: A flag definition (via Bool, BoolVar, Int, IntVar, etc.)
    will panic if Set has already been called on a flag with the
    same name. This change is intended to detect cases where
    changes in initialization order cause flag operations to occur
    in a different order than expected. In many cases the fix to
    this problem is to introduce a explicit package dependence to
    correctly order the definition before any Set operations.
  * go/ast: The new IsGenerated predicate reports whether a file
    syntax tree contains the special comment that conventionally
    indicates that the file was generated by a tool.
  * go/ast: The new File.GoVersion field records the minimum Go
    version required by any //go:build or // +build directives.
  * go/build: The package now parses build directives (comments
    that start with //go:) in file headers (before the package
    declaration). These directives are available in the new Package
    fields Directives, TestDirectives, and XTestDirectives.
  * go/build/constraint: The new GoVersion function returns the
    minimum Go version implied by a build expression.
  * go/token: The new File.Lines method returns the file's
    line-number table in the same form as accepted by
    File.SetLines.
  * go/types: The new Package.GoVersion method returns the Go
    language version used to check the package.
  * hash/maphash: The hash/maphash package now has a pure Go
    implementation, selectable with the purego build tag.
  * html/template: The new error ErrJSTemplate is returned when an
    action appears in a JavaScript template literal. Previously an
    unexported error was returned.
  * io/fs: The new FormatFileInfo function returns a formatted
    version of a FileInfo. The new FormatDirEntry function returns
    a formatted version of a DirEntry. The implementation of
    DirEntry returned by ReadDir now implements a String method
    that calls FormatDirEntry, and the same is true for the
    DirEntry value passed to WalkDirFunc.
  * math/big: The new Int.Float64 method returns the nearest
    floating-point value to a multi-precision integer, along with
    an indication of any rounding that occurred.
  * net: On Linux, the net package can now use Multipath TCP when
    the kernel supports it. It is not used by default. To use
    Multipath TCP when available on a client, call the
    Dialer.SetMultipathTCP method before calling the Dialer.Dial or
    Dialer.DialContext methods. To use Multipath TCP when available
    on a server, call the ListenConfig.SetMultipathTCP method
    before calling the ListenConfig.Listen method. Specify the
    network as "tcp" or "tcp4" or "tcp6" as usual. If Multipath TCP
    is not supported by the kernel or the remote host, the
    connection will silently fall back to TCP. To test whether a
    particular connection is using Multipath TCP, use the
    TCPConn.MultipathTCP method.
  * net: In a future Go release we may enable Multipath TCP by
    default on systems that support it.
  * net/http: The new ResponseController.EnableFullDuplex method
    allows server handlers to concurrently read from an HTTP/1
    request body while writing the response. Normally, the HTTP/1
    server automatically consumes any remaining request body before
    starting to write the response, to avoid deadlocking clients
    which attempt to write a complete request before reading the
    response. The EnableFullDuplex method disables this behavior.
  * net/http: The new ErrSchemeMismatch error is returned by Client
    and Transport when the server responds to an HTTPS request with
    an HTTP response.
  * net/http: The net/http package now supports
    errors.ErrUnsupported, in that the expression
    errors.Is(http.ErrNotSupported, errors.ErrUnsupported) will
    return true.
  * os: Programs may now pass an empty time.Time value to the
    Chtimes function to leave either the access time or the
    modification time unchanged.
  * os: On Windows the File.Chdir method now changes the current
    directory to the file, rather than always returning an error.
  * os: On Unix systems, if a non-blocking descriptor is passed to
    NewFile, calling the File.Fd method will now return a
    non-blocking descriptor. Previously the descriptor was
    converted to blocking mode.
  * os: On Windows calling Truncate on a non-existent file used to
    create an empty file. It now returns an error indicating that
    the file does not exist.
  * os: On Windows calling TempDir now uses GetTempPath2W when
    available, instead of GetTempPathW. The new behavior is a
    security hardening measure that prevents temporary files
    created by processes running as SYSTEM to be accessed by
    non-SYSTEM processes.
  * os: On Windows the os package now supports working with files
    whose names, stored as UTF-16, can't be represented as valid
    UTF-8.
  * os: On Windows Lstat now resolves symbolic links for paths
    ending with a path separator, consistent with its behavior on
    POSIX platforms.
  * os: The implementation of the io/fs.DirEntry interface returned
    by the ReadDir function and the File.ReadDir method now
    implements a String method that calls io/fs.FormatDirEntry.
  * os: The implementation of the io/fs.FS interface returned by
    the DirFS function now implements the io/fs.ReadFileFS and the
    io/fs.ReadDirFS interfaces.
  * path/filepath: The implementation of the io/fs.DirEntry
    interface passed to the function argument of WalkDir now
    implements a String method that calls io/fs.FormatDirEntry.
  * reflect: In Go 1.21, ValueOf no longer forces its argument to
    be allocated on the heap, allowing a Value's content to be
    allocated on the stack. Most operations on a Value also allow
    the underlying value to be stack allocated.
  * reflect: The new Value method Value.Clear clears the contents
    of a map or zeros the contents of a slice. This corresponds to
    the new clear built-in added to the language.
  * reflect: The SliceHeader and StringHeader types are now
    deprecated. In new code prefer unsafe.Slice, unsafe.SliceData,
    unsafe.String, or unsafe.StringData.
  * regexp: Regexp now defines MarshalText and UnmarshalText
    methods. These implement encoding.TextMarshaler and
    encoding.TextUnmarshaler and will be used by packages such as
    encoding/json.
  * runtime: Textual stack traces produced by Go programs, such as
    those produced when crashing, calling runtime.Stack, or
    collecting a goroutine profile with debug=2, now include the
    IDs of the goroutines that created each goroutine in the stack
    trace.
  * runtime: Crashing Go applications can now opt-in to Windows
    Error Reporting (WER) by setting the environment variable
    GOTRACEBACK=wer or calling debug.SetTraceback("wer") before the
    crash. Other than enabling WER, the runtime will behave as with
    GOTRACEBACK=crash. On non-Windows systems, GOTRACEBACK=wer is
    ignored.
  * runtime: GODEBUG=cgocheck=2, a thorough checker of cgo pointer
    passing rules, is no longer available as a debug
    option. Instead, it is available as an experiment using
    GOEXPERIMENT=cgocheck2. In particular this means that this mode
    has to be selected at build time instead of startup time.
  * runtime: GODEBUG=cgocheck=1 is still available (and is still
    the default).
  * runtime: A new type Pinner has been added to the runtime
    package. Pinners may be used to "pin" Go memory such that it
    may be used more freely by non-Go code. For instance, passing
    Go values that reference pinned Go memory to C code is now
    allowed. Previously, passing any such nested reference was
    disallowed by the cgo pointer passing rules. See the docs for
    more details.
  * runtime/metrics: A few previously-internal GC metrics, such as
    live heap size, are now available. GOGC and GOMEMLIMIT are also
    now available as metrics.
  * runtime/trace: Collecting traces on amd64 and arm64 now incurs
    a substantially smaller CPU cost: up to a 10x improvement over
    the previous release.
  * runtime/trace: Traces now contain explicit stop-the-world
    events for every reason the Go runtime might stop-the-world,
    not just garbage collection.
  * sync: The new OnceFunc, OnceValue, and OnceValues functions
    capture a common use of Once to lazily initialize a value on
    first use.
  * syscall: On Windows the Fchdir function now changes the current
    directory to its argument, rather than always returning an
    error.
  * syscall: On FreeBSD SysProcAttr has a new field Jail that may
    be used to put the newly created process in a jailed
    environment.
  * syscall: On Windows the syscall package now supports working
    with files whose names, stored as UTF-16, can't be represented
    as valid UTF-8. The UTF16ToString and UTF16FromString functions
    now convert between UTF-16 data and WTF-8 strings. This is
    backward compatible as WTF-8 is a superset of the UTF-8 format
    that was used in earlier releases.
  * syscall: Several error values match the new
    errors.ErrUnsupported, such that errors.Is(err,
    errors.ErrUnsupported) returns true.
    ENOSYS
    ENOTSUP
    EOPNOTSUPP
    EPLAN9 (Plan 9 only)
    ERROR_CALL_NOT_IMPLEMENTED (Windows only)
    ERROR_NOT_SUPPORTED (Windows only)
    EWINDOWS (Windows only)
  * testing: The new -test.fullpath option will print full path
    names in test log messages, rather than just base names.
  * testing: The new Testing function reports whether the program
    is a test created by go test.
  * testing/fstest: Calling Open.Stat will return a type that now
    implements a String method that calls io/fs.FormatFileInfo.
  * unicode: The unicode package and associated support throughout
    the system has been upgraded to Unicode 15.0.0.
  * Darwin port: As announced in the Go 1.20 release notes, Go 1.21
    requires macOS 10.15 Catalina or later; support for previous
    versions has been discontinued.
  * Windows port: As announced in the Go 1.20 release notes, Go
    1.21 requires at least Windows 10 or Windows Server 2016;
    support for previous versions has been discontinued.
  * WebAssembly port: The new go:wasmimport directive can now be
    used in Go programs to import functions from the WebAssembly
    host.
  * WebAssembly port: The Go scheduler now interacts much more
    efficiently with the JavaScript event loop, especially in
    applications that block frequently on asynchronous events.
  * WebAssembly System Interface port: Go 1.21 adds an experimental
    port to the WebAssembly System Interface (WASI), Preview 1
    (GOOS=wasip1, GOARCH=wasm).
  * WebAssembly System Interface port: As a result of the addition
    of the new GOOS value "wasip1", Go files named *_wasip1.go will
    now be ignored by Go tools except when that GOOS value is being
    used. If you have existing filenames matching that pattern, you
    will need to rename them.
  * ppc64/ppc64le port: On Linux, GOPPC64=power10 now generates
    PC-relative instructions, prefixed instructions, and other new
    Power10 instructions. On AIX, GOPPC64=power10 generates Power10
    instructions, but does not generate PC-relative instructions.
  * ppc64/ppc64le port: When building position-independent binaries
    for GOPPC64=power10 GOOS=linux GOARCH=ppc64le, users can expect
    reduced binary sizes in most cases, in some cases
    3.5%. Position-independent binaries are built for ppc64le with
    the following -buildmode values: c-archive, c-shared, shared,
    pie, plugin.
  * loong64 port: The linux/loong64 port now supports
  - buildmode=c-archive, -buildmode=c-shared and -buildmode=pie.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1693915200">- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1694001600">- go1.21.1 (released 2023-09-06) includes four security fixes to
  the cmd/go, crypto/tls, and html/template packages, as well as
  bug fixes to the compiler, the go command, the linker, the
  runtime, and the context, crypto/tls, encoding/gob, encoding/xml,
  go/types, net/http, os, and path/filepath packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322
  * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData
  * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution
  * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry
  * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors
  * go#61821 runtime/internal/wasitest: TestTCPEcho is racy
  * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released
  * go#61909 cmd/compile: internal compiler error: missed typecheck
  * go#61910 os: ReadDir fails on file systems without File ID support on Windows
  * go#61927 cmd/distpack: release archives don't include directory members
  * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20
  * go#61932 go/types, types2: index out of range panic in Checker.arguments
  * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N
  * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0
  * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows
  * go#61967 crypto/tls: add GODEBUG to control max RSA key size
  * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l'
  * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic
  * go#62051 encoding/xml: incompatible changes in the Go 1.21.0
  * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62071 cmd/api: make non-importable
  * go#62140 cmd/link: slice bounds out of range
  * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice
  * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory
  * go#62154 encoding/gob: panic decoding into local type, received remote type
  * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond
  * go#62204 maps: segfault in Clone
  * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels
  * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test
  * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED
  * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696507200">- go1.21.2 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the compiler, the go
  command, the linker, the runtime, and the runtime/metrics
  package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39323
  * go#63214 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62464 runtime: "traceback did not unwind completely"
  * go#62478 runtime/metrics: /gc/scan* metrics return zero
  * go#62505 plugin: variable not initialized properly
  * go#62506 cmd/compile: internal compiler error: InvertFlags should never make it to codegen v100 = InvertFlags v123
  * go#62509 runtime: scheduler change causes Delve's function call injection to fail intermittently
  * go#62537 runtime: "fatal: morestack on g0" with PGO enabled on arm64
  * go#62598 cmd/link: issues with Apple's new linker in Xcode 15 beta
  * go#62668 cmd/compile: slow to compile 17,000 line switch statement?
  * go#62711 cmd/go: TestScript/gotoolchain_path fails if golang.org/dl/go1.21.1 is installed in the user's $PATH</changelog>
  <changelog author="jkowalczyk@suse.com" date="1696939200">- go1.21.3 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work</changelog>
  <changelog author="jkowalczyk@suse.com" date="1699358400">- go1.21.4 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker, the
  runtime, the compiler, and the go/types, net/http, and
  runtime/cgo packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63715 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#62207 spec: update unification rules
  * go#62545 cmd/compile: internal compiler error: expected struct value to have type struct
  * go#63317 cmd/link: split text sections for arm 32-bit
  * go#63335 runtime: MADV_COLLAPSE causes production performance issues on Linux
  * go#63339 go/types, x/tools/go/ssa: panic: type param without replacement encountered
  * go#63509 cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  * go#63560 net/http: http2 page fails on firefox/safari if pushing resources</changelog>
  <changelog author="jkowalczyk@suse.com" date="1701777600">- go1.21.5 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler, the go command, the runtime, and the
  crypto/rand, net, os, and syscall packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63973 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64041 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64435 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#62055 cmd/go: go mod download needs to support toolchain upgrades
  * go#63743 cmd/compile: invalid pointer found on stack when compiled with -race
  * go#63764 os: NTFS deduped file changed from regular to irregular
  * go#63801 net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel &lt; 5.1
  * go#63984 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63994 syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
  * go#64073 runtime: self-deadlock on mheap_.lock
  * go#64413 crypto/rand: Legacy RtlGenRandom use on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1704801600">- go1.21.6 (released 2024-01-09) includes fixes to the compiler,
  the runtime, and the crypto/tls, maps, and runtime/pprof
  packages.
  Refs boo#1212475 go1.21 release tracking
  * go#63911 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64410 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64472 cmd/compile: linux/s390x: inlining bug in s390x
  * go#64475 maps: maps.Clone reference semantics when cloning a map with large value types
  * go#64561 runtime: excessive memory use between 1.21.0 -&gt; 1.21.1
  * go#64567 cmd/compile: max/min builtin broken when used with string(byte) conversions
  * go#64609 runtime/pprof: incorrect function names for generics functions
  * go#64719 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3
  * go#64757 runtime: race condition raised with parallel tests, panic(nil) and -race</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.21.7 (released 2024-02-06) includes fixes to the compiler,
  the go command, the runtime, and the crypto/x509 package.
  Refs boo#1212475 go1.21 release tracking
  * go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
  * go#63768 runtime: pinner.Pin doesn't panic when it says it will
  * go#64497 cmd/go: flag modcacherw does not take effect in the target package
  * go#64761 staticlockranking builders failing on release branches on LUCI
  * go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack"
  * go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests
  * go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params
  * go#65323 crypto: rollback BoringCrypto fips-20220613 update
  * go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder
  * go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.21.8 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the go command and the
  runtime.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65385 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65389 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65392 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65848 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65968 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65472 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65475 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65478 runtime: don't let the tests leave core files behind
  * go#65640 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65851 cmd/go: "missing ziphash" error with go.work
  * go#65882 internal/poll: invalid uintptr conversion in call to windows.SetFileInformationByHandle</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.21.9 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the linker, and the
  go/types and net/http packages.
  Refs boo#1212475 go1.21 release tracking
  CVE-2023-45288
  * go#65387 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#66254 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66326 cmd/compile: //go:build file version ignored when using generic function from package "slices" in Go 1.21
  * go#66411 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.21.10 (released 2024-05-07) includes security fixes to the go
  command, as well as bug fixes to the net/http package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24787
  * go#67121 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#66697 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.21.11 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the os package.
  Refs boo#1212475 go1.21 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag
  * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67695 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="515b5bfdf1a66d49d4b1c43d3abdcb127b584c0deb71835e040dbff4b4aab095" name="go1.22" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="8d71389e3137ac70375bdcfc980bfee9c174341d20023b320485deb2b8bfe21a" name="go1.22" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="0f25ddbdb63ae9480f5379226308c68f9d2dbc50a3675bac55ef8fd056474108" name="go1.22" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="2d6c48264ac5bd1ac900ac9efb71d4d5c7a83b98fab268ddf7062c4fdaf2ae42" name="go1.22" arch="src">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="21d4babd831a525a19467d668220638fc84fba899a308d633b5bda8038184680" name="go1.22" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="2650849ac236b9bf81f08a77b793e53f96b286e867e8b816576dbf99c187a0d1" name="go1.22" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="efa9da38e3319fb6bff56b4e2dd821d20a0a5fb4714db4b903739f37f3bf9372" name="go1.22" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="dbd72fd550401060bff39fffd51978816e70f62a56f0b2d5ff84aaf9d2250c71" name="go1.22" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="50cc290d7887e47f367018f9a2aded32c7630067a4ac47646ac342622edb3b93" name="go1.22" arch="src">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="0c456e296a5c4e05bbde4e74590bb735e255d9f2bb19ac8ab5f71045ae710ee2" name="go1.22" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="bcffc7086e2db7c1997eb7ced6fcc3b79226cc0a8fa7a4b6730b78dbc458ac15" name="go1.22-doc" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="494e33fcba6cc9f591b48f98c44b9d6024308a42eb44f75401006b487062c92b" name="go1.22-doc" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="b8a255f75cd529b7f82afa8ead95d6409f2bb02f3f0ec91e3c81089e657ceb62" name="go1.22-doc" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="c9ba8e1177d6800e88ef9b90bd09c26f56bdffaff72ab556fdb4799547691b56" name="go1.22-doc" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="3bf32aad28f4042275882e4c9525026b09090a058cc1e489eeca247188389a2a" name="go1.22-doc" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="438c8063fdf6a3cffbaff2494eb8630ee83d8119bc278f2354ac1b08f6aadba1" name="go1.22-doc" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="cd8b3e6f39f63002e983824bb42458ebfe77cf7e056d8f0f3bf00d97e7a37753" name="go1.22-doc" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="01c7200f6c0ca14b56d06b5ee5bba4be648dedd7bce590a8e0092a8b291b6680" name="go1.22-doc" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="7efc858e0ab25918f413f98ba12fc0c496569d0c3fb242c3f31a5b0332332711" name="go1.22-race" arch="aarch64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="135e77e0db05eed339d7e570a6700045ac854889ea674bfd92912a0afe377d56" name="go1.22-race" arch="ppc64le">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="17ef9b311318aaf6713edcc1f45baac1349b2bd5a2ec43bab9899971407694f6" name="go1.22-race" arch="s390x">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="6ba89f0c4d8f13a177ec53084ff5d09e23b405365e1af061564682c10f198006" name="go1.22-race" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="150000.1.15.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
</package>
<package pkgid="1cd59471350a7800e711866ca05c056381c7a94c3ccd07f9ff1f3a781a661eb5" name="go1.22-race" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="c09fcd79e71931fd70d19f27562d2bbbcde87e87b88fc89f407f502d94ef6d93" name="go1.22-race" arch="ppc64le">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="57862e589247e42cbca46031a195741057f07b5d56b6ec05314803d917adab46" name="go1.22-race" arch="s390x">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="9713917b8cfbe6900b1e441b14e2c4fa601f5993fc17d0e2a292d4d9d65500bf" name="go1.22-race" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150000.1.18.1"/>
  <changelog author="jkowalczyk@suse.com" date="1702987200">- go1.22rc1 (released 2023-12-19) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc1.
  Refs boo#1218424 go1.22 release tracking
  * go1.22 now requires the final point release of go1.20 or later
    for bootstrap. Go upstream expects that go1.24 will require the
    final point release of Go 1.22 or later for bootstrap.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1706097600">- go1.22rc2 (released 2024-01-24) is a release candidate version of
  go1.22 cut from the master branch at the revision tagged
  go1.22rc2.
  Refs boo#1218424 go1.22 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220800">- go1.22 (released 2024-02-06) is a major release of Go.
  go1.22.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.22 arrives six months after go1.21. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1218424 go1.22 release tracking
  * Language change: go1.22 makes two changes to for loops.
    Previously, the variables declared by a for loop were created
    once and updated by each iteration. In go1.22, each iteration
    of the loop creates new variables, to avoid accidental sharing
    bugs. The transition support tooling described in the proposal
    continues to work in the same way it did in Go 1.21.
  * Language change: For loops may now range over integers
  * Language change: go1.22 includes a preview of a language change
    we are considering for a future version of Go:
    range-over-function iterators. Building with
    GOEXPERIMENT=rangefunc enables this feature.
  * go command: Commands in workspaces can now use a vendor
    directory containing the dependencies of the workspace. The
    directory is created by go work vendor, and used by build
    commands when the -mod flag is set to vendor, which is the
    default when a workspace vendor directory is present.  Note
    that the vendor directory's contents for a workspace are
    different from those of a single module: if the directory at
    the root of a workspace also contains one of the modules in the
    workspace, its vendor directory can contain the dependencies of
    either the workspace or of the module, but not both.
  * go get is no longer supported outside of a module in the legacy
    GOPATH mode (that is, with GO111MODULE=off). Other build
    commands, such as go build and go test, will continue to work
    indefinitely for legacy GOPATH programs.
  * go mod init no longer attempts to import module requirements
    from configuration files for other vendoring tools (such as
    Gopkg.lock).
  * go test -cover now prints coverage summaries for covered
    packages that do not have their own test files. Prior to Go
    1.22 a go test -cover run for such a package would report: ?
    mymod/mypack [no test files] and now with go1.22, functions in
    the package are treated as uncovered: mymod/mypack coverage:
    0.0% of statements Note that if a package contains no
    executable code at all, we can't report a meaningful coverage
    percentage; for such packages the go tool will continue to
    report that there are no test files.
  * trace: The trace tool's web UI has been gently refreshed as
    part of the work to support the new tracer, resolving several
    issues and improving the readability of various sub-pages. The
    web UI now supports exploring traces in a thread-oriented
    view. The trace viewer also now displays the full duration of
    all system calls.  These improvements only apply for viewing
    traces produced by programs built with go1.22 or newer. A
    future release will bring some of these improvements to traces
    produced by older version of Go.
  * vet: References to loop variables The behavior of the vet tool
    has changed to match the new semantics (see above) of loop
    variables in go1.22. When analyzing a file that requires go1.22
    or newer (due to its go.mod file or a per-file build
    constraint), vetcode&gt; no longer reports references to loop
    variables from within a function literal that might outlive the
    iteration of the loop. In Go 1.22, loop variables are created
    anew for each iteration, so such references are no longer at
    risk of using a variable after it has been updated by the loop.
  * vet: New warnings for missing values after append The vet tool
    now reports calls to append that pass no values to be appended
    to the slice, such as slice = append(slice). Such a statement
    has no effect, and experience has shown that is nearly always a
    mistake.
  * vet: New warnings for deferring time.Since The vet tool now
    reports a non-deferred call to time.Since(t) within a defer
    statement. This is equivalent to calling time.Now().Sub(t)
    before the defer statement, not when the deferred function is
    called. In nearly all cases, the correct code requires
    deferring the time.Since call.
  * vet: New warnings for mismatched key-value pairs in log/slog
    calls The vet tool now reports invalid arguments in calls to
    functions and methods in the structured logging package,
    log/slog, that accept alternating key/value pairs. It reports
    calls where an argument in a key position is neither a string
    nor a slog.Attr, and where a final key is missing its value.
  * runtime: The runtime now keeps type-based garbage collection
    metadata nearer to each heap object, improving the CPU
    performance (latency or throughput) of Go programs by
    1-3%. This change also reduces the memory overhead of the
    majority Go programs by approximately 1% by deduplicating
    redundant metadata. Some programs may see a smaller improvement
    because this change adjusts the size class boundaries of the
    memory allocator, so some objects may be moved up a size class.
    A consequence of this change is that some objects' addresses
    that were previously always aligned to a 16 byte (or higher)
    boundary will now only be aligned to an 8 byte boundary. Some
    programs that use assembly instructions that require memory
    addresses to be more than 8-byte aligned and rely on the memory
    allocator's previous alignment behavior may break, but we
    expect such programs to be rare. Such programs may be built
    with GOEXPERIMENT=noallocheaders to revert to the old metadata
    layout and restore the previous alignment behavior, but package
    owners should update their assembly code to avoid the alignment
    assumption, as this workaround will be removed in a future
    release.
  * runtime: On the windows/amd64 port, programs linking or loading
    Go libraries built with -buildmode=c-archive or
  - buildmode=c-shared can now use the SetUnhandledExceptionFilter
    Win32 function to catch exceptions not handled by the Go
    runtime. Note that this was already supported on the
    windows/386 port.
  * compiler: Profile-guided Optimization (PGO) builds can now
    devirtualize a higher proportion of calls than previously
    possible. Most programs from a representative set of Go
    programs now see between 2 and 14% improvement from enabling
    PGO.
  * compiler: The compiler now interleaves devirtualization and
    inlining, so interface method calls are better optimized.
  * compiler: go1.22 also includes a preview of an enhanced
    implementation of the compiler's inlining phase that uses
    heuristics to boost inlinability at call sites deemed
    "important" (for example, in loops) and discourage inlining at
    call sites deemed "unimportant" (for example, on panic
    paths). Building with GOEXPERIMENT=newinliner enables the new
    call-site heuristics; see issue #61502 for more info and to
    provide feedback.
  * linker: The linker's -s and -w flags are now behave more
    consistently across all platforms. The -w flag suppresses DWARF
    debug information generation. The -s flag suppresses symbol
    table generation. The -s flag also implies the -w flag, which
    can be negated with -w=0. That is, -s -w=0 will generate a
    binary with DWARF debug information generation but without the
    symbol table.
  * linker: On ELF platforms, the -B linker flag now accepts a
    special form: with -B gobuildid, the linker will generate a GNU
    build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go
    build ID.
  * linker: On Windows, when building with -linkmode=internal, the
    linker now preserves SEH information from C object files by
    copying the .pdata and .xdata sections into the final
    binary. This helps with debugging and profiling binaries using
    native tools, such as WinDbg. Note that until now, C functions'
    SEH exception handlers were not being honored, so this change
    may cause some programs to behave differently.
  - linkmode=external is not affected by this change, as external
    linkers already preserve SEH information.
  * bootstrap: As mentioned in the Go 1.20 release notes, go1.22
    now requires the final point release of Go 1.20 or later for
    bootstrap. We expect that Go 1.24 will require the final point
    release of go1.22 or later for bootstrap.
  * core library: New math/rand/v2 package: go1.22 includes the
    first “v2” package in the standard library, math/rand/v2. The
    changes compared to math/rand are detailed in proposal
    go#61716. The most important changes are:
  - The Read method, deprecated in math/rand, was not carried
    forward for math/rand/v2. (It remains available in
    math/rand.) The vast majority of calls to Read should use
    crypto/rand’s Read instead. Otherwise a custom Read can be
    constructed using the Uint64 method.
  - The global generator accessed by top-level functions is
    unconditionally randomly seeded. Because the API guarantees
    no fixed sequence of results, optimizations like per-thread
    random generator states are now possible.
  - The Source interface now has a single Uint64 method; there is
    no Source64 interface.
  - Many methods now use faster algorithms that were not possible
    to adopt in math/rand because they changed the output
    streams.
  - The Intn, Int31, Int31n, Int63, and Int64n top-level
    functions and methods from math/rand are spelled more
    idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64,
    and Int64N. There are also new top-level functions and
    methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN.
  - The new generic function N is like Int64N or Uint64N but
    works for any integer type. For example a random duration
    from 0 up to 5 minutes is rand.N(5*time.Minute).
  - The Mitchell &amp; Reeds LFSR generator provided by math/rand’s
    Source has been replaced by two more modern pseudo-random
    generator sources: ChaCha8 PCG. ChaCha8 is a new,
    cryptographically strong random number generator roughly
    similar to PCG in efficiency. ChaCha8 is the algorithm used
    for the top-level functions in math/rand/v2. As of go1.22,
    math/rand's top-level functions (when not explicitly seeded)
    and the Go runtime also use ChaCha8 for randomness.
  - We plan to include an API migration tool in a future release,
    likely Go 1.23.
  * core library: New go/version package: The new go/version
    package implements functions for validating and comparing Go
    version strings.
  * core library: Enhanced routing patterns: HTTP routing in the
    standard library is now more expressive. The patterns used by
    net/http.ServeMux have been enhanced to accept methods and
    wildcards. This change breaks backwards compatibility in small
    ways, some obvious—patterns with "{" and "}" behave
    differently— and some less so—treatment of escaped paths has
    been improved. The change is controlled by a GODEBUG field
    named httpmuxgo121. Set httpmuxgo121=1 to restore the old
    behavior.
  * Minor changes to the library As always, there are various minor
    changes and updates to the library, made with the Go 1 promise
    of compatibility in mind. There are also various performance
    improvements, not enumerated here.
  * archive/tar: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * archive/zip: The new method Writer.AddFS adds all of the files
    from an fs.FS to the archive.
  * bufio: When a SplitFunc returns ErrFinalToken with a nil token,
    Scanner will now stop immediately. Previously, it would report
    a final empty token before stopping, which was usually not
    desired. Callers that do want to report a final empty token can
    do so by returning []byte{} rather than nil.
  * cmp: The new function Or returns the first in a sequence of
    values that is not the zero value.
  * crypto/tls: ConnectionState.ExportKeyingMaterial will now
    return an error unless TLS 1.3 is in use, or the
    extended_master_secret extension is supported by both the
    server and client. crypto/tls has supported this extension
    since Go 1.20. This can be disabled with the tlsunsafeekm=1
    GODEBUG setting.
  * crypto/tls: By default, the minimum version offered by
    crypto/tls servers is now TLS 1.2 if not specified with
    config.MinimumVersion, matching the behavior of crypto/tls
    clients. This change can be reverted with the tls10server=1
    GODEBUG setting.
  * crypto/tls: By default, cipher suites without ECDHE support are
    no longer offered by either clients or servers during pre-TLS
    1.3 handshakes. This change can be reverted with the
    tlsrsakex=1 GODEBUG setting.
  * crypto/x509: The new CertPool.AddCertWithConstraint method can
    be used to add customized constraints to root certificates to
    be applied during chain building.
  * crypto/x509: On Android, root certificates will now be loaded
    from /data/misc/keychain/certs-added as well as
    /system/etc/security/cacerts.
  * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers
    with individual components larger than 31 bits. A new field
    which uses this type, Policies, is added to the Certificate
    struct, and is now populated during parsing. Any OIDs which
    cannot be represented using a asn1.ObjectIdentifier will appear
    in Policies, but not in the old PolicyIdentifiers field. When
    calling CreateCertificate, the Policies field is ignored, and
    policies are taken from the PolicyIdentifiers field. Using the
    x509usepolicies=1 GODEBUG setting inverts this, populating
    certificate policies from the Policies field, and ignoring the
    PolicyIdentifiers field. We may change the default value of
    x509usepolicies in Go 1.23, making Policies the default field
    for marshaling.
  * database/sql: The new Null[T] type provide a way to scan
    nullable columns for any column types.
  * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64
    systems. Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * encoding: The new methods AppendEncode and AppendDecode added
    to each of the Encoding types in the packages encoding/base32,
    encoding/base64, and encoding/hex simplify encoding and
    decoding from and to byte slices by taking care of byte slice
    buffer management.
  * encoding: The methods base32.Encoding.WithPadding and
    base64.Encoding.WithPadding now panic if the padding argument
    is a negative value other than NoPadding.
  * encoding/json: Marshaling and encoding functionality now
    escapes '\b' and '\f' characters as \b and \f instead of \u0008
    and \u000c.
  * go/ast: The following declarations related to syntactic
    identifier resolution are now deprecated: Ident.Obj, Object,
    Scope, File.Scope, File.Unresolved, Importer, Package,
    NewPackage. In general, identifiers cannot be accurately
    resolved without type information. Consider, for example, the
    identifier K in T{K: ""}: it could be the name of a local
    variable if T is a map type, or the name of a field if T is a
    struct type. New programs should use the go/types package to
    resolve identifiers; see Object, Info.Uses, and Info.Defs for
    details.
  * go/ast: The new ast.Unparen function removes any enclosing
    parentheses from an expression.
  * go/types: The new Alias type represents type
    aliases. Previously, type aliases were not represented
    explicitly, so a reference to a type alias was equivalent to
    spelling out the aliased type, and the name of the alias was
    lost. The new representation retains the intermediate
    Alias. This enables improved error reporting (the name of a
    type alias can be reported), and allows for better handling of
    cyclic type declarations involving type aliases. In a future
    release, Alias types will also carry type parameter
    information. The new function Unalias returns the actual type
    denoted by an Alias type (or any other Type for that matter).
  * go/types: Because Alias types may break existing type switches
    that do not know to check for them, this functionality is
    controlled by a GODEBUG field named gotypesalias. With
    gotypesalias=0, everything behaves as before, and Alias types
    are never created. With gotypesalias=1, Alias types are created
    and clients must expect them. The default is gotypesalias=0. In
    a future release, the default will be changed to
    gotypesalias=1. Clients of go/types are urged to adjust their
    code as soon as possible to work with gotypesalias=1 to
    eliminate problems early.
  * go/types: The Info struct now exports the FileVersions map
    which provides per-file Go version information.
  * go/types: The new helper method PkgNameOf returns the local
    package name for the given import declaration.
  * go/types: The implementation of SizesFor has been adjusted to
    compute the same type sizes as the compiler when the compiler
    argument for SizesFor is "gc". The default Sizes implementation
    used by the type checker is now types.SizesFor("gc", "amd64").
  * go/types: The start position (Pos) of the lexical environment
    block (Scope) that represents a function body has changed: it
    used to start at the opening curly brace of the function body,
    but now starts at the function's func token.
  * html/template: Javascript template literals may now contain Go
    template actions, and parsing a template containing one will no
    longer return ErrJSTemplate. Similarly the GODEBUG setting
    jstmpllitinterp no longer has any effect.
  * io: The new SectionReader.Outer method returns the ReaderAt,
    offset, and size passed to NewSectionReader.
  * log/slog: The new SetLogLoggerLevel function controls the level
    for the bridge between the `slog` and `log` packages. It sets
    the minimum level for calls to the top-level `slog` logging
    functions, and it sets the level for calls to `log.Logger` that
    go through `slog`.
  * math/big: The new method Rat.FloatPrec computes the number of
    fractional decimal digits required to represent a rational
    number accurately as a floating-point number, and whether
    accurate decimal representation is possible in the first place.
  * net: When io.Copy copies from a TCPConn to a UnixConn, it will
    now use Linux's splice(2) system call if possible, using the
    new method TCPConn.WriteTo.
  * net: The Go DNS Resolver, used when building with
    "-tags=netgo", now searches for a matching name in the Windows
    hosts file, located at %SystemRoot%\System32\drivers\etc\hosts,
    before making a DNS query.
  * net/http: The new functions ServeFileFS, FileServerFS, and
    NewFileTransportFS are versions of the existing ServeFile,
    FileServer, and NewFileTransport, operating on an fs.FS.
  * net/http: The HTTP server and client now reject requests and
    responses containing an invalid empty Content-Length
    header. The previous behavior may be restored by setting
    GODEBUG field httplaxcontentlength=1.
  * net/http: The new method Request.PathValue returns path
    wildcard values from a request and the new method
    Request.SetPathValue sets path wildcard values on a request.
  * net/http/cgi: When executing a CGI process, the PATH_INFO
    variable is now always set to the empty string or a value
    starting with a / character, as required by RFC 3875. It was
    previously possible for some combinations of Handler.Root and
    request URL to violate this requirement.
  * net/netip: The new AddrPort.Compare method compares two
    AddrPorts.
  * os: On Windows, the Stat function now follows all reparse
    points that link to another named entity in the system. It was
    previously only following IO_REPARSE_TAG_SYMLINK and
    IO_REPARSE_TAG_MOUNT_POINT reparse points.
  * os: On Windows, passing O_SYNC to OpenFile now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and
    File.Readdirnames functions now read directory entries in
    batches to reduce the number of system calls, improving
    performance up to 30%.
  * os: When io.Copy copies from a File to a net.UnixConn, it will
    now use Linux's sendfile(2) system call if possible, using the
    new method File.WriteTo.
  * os/exec: On Windows, LookPath now ignores empty entries
    in %PATH%, and returns ErrNotFound (instead of ErrNotExist)
    if no executable file extension is found to resolve an
    otherwise-unambiguous name.
  * os/exec: On Windows, Command and Cmd.Start no longer call
    LookPath if the path to the executable is already absolute and
    has an executable file extension. In addition, Cmd.Start no
    longer writes the resolved extension back to the Path field, so
    it is now safe to call the String method concurrently with a
    call to Start.
  * reflect: The Value.IsZero method will now return true for a
    floating-point or complex negative zero, and will return true
    for a struct value if a blank field (a field named _) somehow
    has a non-zero value. These changes make IsZero consistent with
    comparing a value to zero using the language == operator.
  * reflect: The PtrTo function is deprecated, in favor of
    PointerTo.
  * reflect: The new function TypeFor returns the Type that
    represents the type argument T. Previously, to get the
    reflect.Type value for a type, one had to use
    reflect.TypeOf((*T)(nil)).Elem(). This may now be written as
    reflect.TypeFor[T]().
  * runtime/metrics: Four new histogram metrics
    /sched/pauses/stopping/gc:seconds,
    /sched/pauses/stopping/other:seconds,
    /sched/pauses/total/gc:seconds, and
    /sched/pauses/total/other:seconds provide additional details
    about stop-the-world pauses. The "stopping" metrics report the
    time taken from deciding to stop the world until all goroutines
    are stopped. The "total" metrics report the time taken from
    deciding to stop the world until it is started again.
  * runtime/metrics: The /gc/pauses:seconds metric is deprecated,
    as it is equivalent to the new /sched/pauses/total/gc:seconds
    metric.
  * runtime/metrics: /sync/mutex/wait/total:seconds now includes
    contention on runtime-internal locks in addition to sync.Mutex
    and sync.RWMutex.
  * runtime/pprof: Mutex profiles now scale contention by the
    number of goroutines blocked on the mutex. This provides a more
    accurate representation of the degree to which a mutex is a
    bottleneck in a Go program. For instance, if 100 goroutines are
    blocked on a mutex for 10 milliseconds, a mutex profile will
    now record 1 second of delay instead of 10 milliseconds of
    delay.
  * runtime/pprof: Mutex profiles also now include contention on
    runtime-internal locks in addition to sync.Mutex and
    sync.RWMutex. Contention on runtime-internal locks is always
    reported at runtime._LostContendedRuntimeLock. A future release
    will add complete stack traces in these cases.
  * runtime/pprof: CPU profiles on Darwin platforms now contain the
    process's memory map, enabling the disassembly view in the
    pprof tool.
  * runtime/trace: The execution tracer has been completely
    overhauled in this release, resolving several long-standing
    issues and paving the way for new use-cases for execution
    traces.
  * runtime/trace: Execution traces now use the operating system's
    clock on most platforms (Windows excluded) so it is possible to
    correlate them with traces produced by lower-level
    components. Execution traces no longer depend on the
    reliability of the platform's clock to produce a correct
    trace. Execution traces are now partitioned regularly
    on-the-fly and as a result may be processed in a streamable
    way. Execution traces now contain complete durations for all
    system calls. Execution traces now contain information about
    the operating system threads that goroutines executed on. The
    latency impact of starting and stopping execution traces has
    been dramatically reduced. Execution traces may now begin or
    end during the garbage collection mark phase.
  * runtime/trace: To allow Go developers to take advantage of
    these improvements, an experimental trace reading package is
    available at golang.org/x/exp/trace. Note that this package
    only works on traces produced by programs built with go1.22 at
    the moment. Please try out the package and provide feedback on
    the corresponding proposal issue.
  * runtime/trace: If you experience any issues with the new
    execution tracer implementation, you may switch back to the old
    implementation by building your Go program with
    GOEXPERIMENT=noexectracer2. If you do, please file an issue,
    otherwise this option will be removed in a future release.
  * slices: The new function Concat concatenates multiple slices.
  * slices: Functions that shrink the size of a slice (Delete,
    DeleteFunc, Compact, CompactFunc, and Replace) now zero the
    elements between the new length and the old length.
  * slices: Insert now always panics if the argument i is out of
    range. Previously it did not panic in this situation if there
    were no elements to be inserted.
  * syscall: The syscall package has been frozen since Go 1.4 and
    was marked as deprecated in Go 1.11, causing many editors to
    warn about any use of the package. However, some non-deprecated
    functionality requires use of the syscall package, such as the
    os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints
    on such code, the syscall package is no longer marked as
    deprecated. The package remains frozen to most new
    functionality, and new code remains encouraged to use
    golang.org/x/sys/unix or golang.org/x/sys/windows where
    possible.
  * syscall: On Linux, the new SysProcAttr.PidFD field allows
    obtaining a PID FD when starting a child process via
    StartProcess or os/exec.
  * syscall: On Windows, passing O_SYNC to Open now causes write
    operations to go directly to disk, equivalent to O_SYNC on Unix
    platforms.
  * testing/slogtest: The new Run function uses sub-tests to run
    test cases, providing finer-grained control.
  * Ports: Darwin: On macOS on 64-bit x86 architecture (the
    darwin/amd64 port), the Go toolchain now generates
    position-independent executables (PIE) by default. Non-PIE
    binaries can be generated by specifying the -buildmode=exe
    build flag. On 64-bit ARM-based macOS (the darwin/arm64 port),
    the Go toolchain already generates PIE by default. go1.22 is
    the last release that will run on macOS 10.15 Catalina. Go 1.23
    will require macOS 11 Big Sur or later.
  * Ports: Arm: The GOARM environment variable now allows you to
    select whether to use software or hardware floating
    point. Previously, valid GOARM values were 5, 6, or 7. Now
    those same values can be optionally followed by ,softfloat or
    ,hardfloat to select the floating-point implementation. This
    new option defaults to softfloat for version 5 and hardfloat
    for versions 6 and 7.
  * Ports: Loong64: The loong64 port now supports passing function
    arguments and results using registers. The linux/loong64 port
    now supports the address sanitizer, memory sanitizer, new-style
    linker relocations, and the plugin build mode.
  * OpenBSD go1.22 adds an experimental port to OpenBSD on
    big-endian 64-bit PowerPC (openbsd/ppc64).</changelog>
  <changelog author="jkowalczyk@suse.com" date="1707220801">- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709035200">- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN</changelog>
  <changelog author="jkowalczyk@suse.com" date="1709640000">- go1.22.1 (released 2024-03-05) includes security fixes to the
  crypto/x509, html/template, net/http, net/http/cookiejar, and
  net/mail packages, as well as bug fixes to the compiler, the go
  command, the runtime, the trace command, and the go/types and
  net/http packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785
  * go#65831 go#65390 boo#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm
  * go#65849 go#65083 boo#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled
  * go#65850 go#65383 boo#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm
  * go#65859 go#65065 boo#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  * go#65969 go#65697 boo#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping
  * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module
  * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders
  * go#65474 internal/testenv: support LUCI mobile builders in testenv tests
  * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently
  * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change
  * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0
  * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing
  * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer
  * go#65728 go/types: nil pointer dereference in Alias.Underlying()
  * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22
  * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux
  * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer
  * go#65852 cmd/go: "missing ziphash" error with go.work
  * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms</changelog>
  <changelog author="jkowalczyk@suse.com" date="1712145600">- go1.22.2 (released 2024-04-03) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the linker, and the encoding/gob, go/types, net/http,
  and runtime/trace packages.
  Refs boo#1218424 go1.22 release tracking
  CVE-2023-45288
  * go#66298 go#65051 boo#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers
  * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1
  * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation
  * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64
  * go#66134 cmd/compile: go test . results in CLOSURE ... &lt;unknown line number&gt;: internal compiler error: assertion failed
  * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument
  * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is *ir.ConvExpr, not *ir.IndexExpr
  * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows
  * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock
  * go#66256 cmd/go: git shallow fetches broken at CL 556358
  * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22
  * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1715083200">- go1.22.3 (released 2024-05-07) includes security fixes to the go
  command and the net package, as well as bug fixes to the
  compiler, the runtime, and the net/http package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24787 CVE-2024-24788
  * go#67122 go#67119 boo#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin
  * go#67040 go#66754 boo#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode
  * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le
  * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE
  * go#66886 runtime: deterministic fallback hashes across process boundary
  * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1717502400">- go1.22.4 (released 2024-06-04) includes security fixes to the
  archive/zip and net/netip packages, as well as bug fixes to the
  compiler, the go command, the linker, the runtime, and the os
  package.
  Refs boo#1218424 go1.22 release tracking
  CVE-2024-24789 CVE-2024-24790
  * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations
  * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
  * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes
  * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64
  * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21'
  * go#67258 runtime: unexpected fault address 0
  * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally
  * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID
  * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections
  * go#67460 cmd/compile: internal compiler error: panic with range over integer value
  * go#67527 cmd/link: panic: machorelocsect: size mismatch
  * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start
  * go#67696 os: RemoveAll susceptible to symlink race</changelog>
</package>
<package pkgid="3ebdf845a10f3ed4d96b7f49bff6dc76e3e0b343e514b194c6dd01d357fb4cbf" name="google-errorprone" arch="src">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="8af1145263474d2ec7a58497cd0dd171826523f61e485a695cceece4feb2466e" name="google-errorprone-annotation" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="a7c795eca6fe76efcd51c6b1995c4d9b71d271fd37d1c4944afd771cde67b99e" name="google-errorprone-docgen_processor" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="1ba7c041bca7b635fe4257ea407533c9daab69129e5c8a7b451e30e8f2dfc748" name="google-errorprone-javadoc" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="26f8b23496033e134428ac5e3cf25cde2f5097926f53b09578c02002c826f04d" name="google-errorprone-parent" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="c4a6085bee59e69bca5e3619ffe4c584032a28cf1cc09123a918540b52d8e418" name="google-errorprone-type_annotations" arch="noarch">
  <version epoch="0" ver="2.26.1" rel="150200.5.6.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of some error_prone artifacts version 2.11.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="fstrba@suse.com" date="1713182400">- Upgrade to version 2.26.1
  * Changes of version 2.26.1:
    + Fixes the module name: from 'com.google.errorprone.annotation'
    to 'com.google.errorprone.annotations'. Amends the OSGi build
    not to include 'Automatic-Module-Name' in the MANIFEST.MF for the
    'annotations' project.
  * Changes of version 2.26.0:
    + The 'annotations' artifact now includes a module-info.java for
    Java Platform Module System support.
    + Disabled checks passed to -XepPatchChecks are now ignored,
    instead of causing a crash.
    + New checks:
  - SystemConsoleNull: Null-checking System.console() is not a
    reliable way to detect if the console is connected to a
    terminal.
  - EnumOrdinal: Discourage uses of Enum.ordinal()
    + Closed issues:
  - Add module-info.java #2649
  - 2.19.x: Exception thrown when a disabled check is passed to
  - XepPatchChecks #3908
  - Ignore disabled checks passed to -XepPatchChecks #4028
  - feat: add jpms definition for annotations #4311
  - Add the 'compile' goal for 'compile-java9' #4314
  * Changes of version 2.25.0:
    + New checks:
  - JUnitIncompatibleType: Detects incompatible types passed to
    an assertion, similar to TruthIncompatibleType
  - RedundantSetterCall: Detects fields set twice in the same
    chained expression. Generalization of previous
    ProtoRedundantSet check to also handle AutoValue.
    + Closed issues:
  - Crash in UnnecessaryStringBuilder #4195
  - Fix typos #4224
  - Add support for specifying badEnclosingTypes for BadImport
    via flags #4228
  - Some BugPattern docs are missing code examples #4248
  - Remove incorrect statement from BugPattern index doc #4249
  - Do not report NonFinalStaticField findings for fields
    modified in @BeforeAll methods #4251
  * Changes of version 2.24.1:
    + Add an assertion to try to help debug #4225
  * Changes of version 2.24.0:
    + New checks:
  - MultipleNullnessAnnotations: Discourage multiple nullness
    annotations
  - NullableTypeParameter: Discourage nullness annotations on
    type parameters
  - NullableWildcard: Discourage nullness annotations on
    wildcards
  - SuperCallToObjectMethod: Generalization of
    SuperEqualsIsObjectEquals, now covers hashCode
  * Changes of version 2.23.0:
    + New checks: DuplicateDateFormatField, NonFinalStaticField,
    StringCharset, StringFormatWithLiteral,
    SuperEqualsIsObjectEquals
    + Bug fixes and improvements: #3897, #4114, #4123
  * Changes of version 2.22.0:
    + New checks:
  - ClosingStandardOutputStreams: Prevents accidentally closing
    System.{out,err} with try-with-resources
  - TruthContainsExactlyElementsInUsage: containsExactly is
    preferred over containsExactlyElementsIn when creating new
    iterables
  - UnnecessaryAsync: detects unnecessary use of async
    primitives in local (and hence single-threaded) scopes
  - ReturnAtTheEndOfVoidFunction: detects unnecessary return
    statements at the end of void functions
  - MultimapKeys: Suggests using keySet() instead of iterating
    over Multimap.keys(), which does not collapse duplicates
    + Bug fixes and improvements:
  - Don't complain about literal IP addresses in
    AddressSelection
  - Prevent SuggestedFixes#renameMethod from modifying return
    type declaration
  - Fix UnusedVariable false positives for private record
    parameters
  - When running in conservative mode, no longer assume that
    implementations of Map.get, etc. return null
  - CanIgnoreReturnValueSuggester: Support additional exempting
    method annotations
  - UnusedVariable: exclude junit5's @RegisterExtension
  - Support running all available patch checks
  - Upgrade java-diff-utils 4.0 -&gt; 4.12
  - Flag unused Refaster template parameters
  - Support @SuppressWarnings("all")
  - Prevent Refaster UMemberSelect from matching method
    parameters
  - MissingDefault : Don't require // fall out comments on
    expression switches
  - Skip UnnecessaryLambda findings for usages in enhanced for
    loops
  - Fix bug where nested MissingBraces violations' suggested
    fixes result in broken code
  - Add support for specifying exemptPrefixes/exemptNames for
    UnusedVariable via flags
  - UnusedMethod: Added exempting variable annotations
  * Changes of version 2.21.1:
    + Handle overlapping ranges in suppressedRegions
    + Add AddressSelection to discourage APIs that convert a
    hostname to a single address
  * Changes of version 2.21.0:
    + New Checkers:
  - AttemptedNegativeZero: Prevents accidental use of -0, which
    is the same as 0. The floating-point negative zero is -0.0.
  - ICCProfileGetInstance: Warns on uses of
    ICC_Profile.getInstance(String), due to JDK-8191622.
  - MutableGuiceModule: Fields in Guice modules should be final.
  - NullableOptional: Discourages @Nullable-annotated Optionals.
  - OverridingMethodInconsistentArgumentNamesChecker: Arguments
    of overriding method are inconsistent with overridden
    method.
    + Fixed issues:
  - Avoid MemberName IOOBE on lambda parameters inside
    overriding methods #3976
  - Improve LockOnNonEnclosingClassLiteral documentation #3986
  - Security scan reported high CVE for
    com.google.guava:guava:31.1-jre #4001
  - Upgrade guava to 32.0.1 #4002
  - Proposal: checker to prevent other checkers from calling
    javac methods that changed across JDKs #4026
  - Add support in ASTHelpersSuggestions for getEnclosedElements
    [#4027]
  * Changes of version 2.20.0:
    + This release is compatible with early-access builds of JDK 21.
    + New Checkers: InlineTrivialConstant, UnnecessaryStringBuilder,
    BanClassLoader, DereferenceWithNullBranch, DoNotUseRuleChain,
    LockOnNonEnclosingClassLiteral, MissingRefasterAnnotation,
    NamedLikeContextualKeyword, NonApiType
    + Fixes issues:
  - Introduce MissingRefasterAnnotation checker #2232
  - Fix minor typo in URepeated #2243
  - Drop unused constant Template#AUTOBOXING_DEFAULT #2997
  - Introduce command-line flag -XepAllSuggestionsAsWarnings
    [#3301]
  - JDK21 compatibility #3843
  - Add OSGi runtime metadata to error-prone's MANIFEST.MF files
    [#3903]
  - Use EISOP Checker Framework version 3.34.0-eisop1 #3918
  - NotJavadoc pattern does not allow Javadoc on module
    declarations #3923
  - ErrorProneInjector incorrectly picks up the no-args
    constructor #3931
  - Several high CVEs related to dependency
    com.google.protobuf:protobuf-java:3.19.2 #3945
  - Upgrade protobuf-java to 3.19.6 #3946
  * Changes of version 2.19.1:
    + This release fixes a binary compatibility issue when running
    on JDK 11
  * Changes of version 2.19.0:
    + New Checkers: NotJavadoc, StringCaseLocaleUsage,
    UnnecessaryTestMethodPrefix
    + Fixes issues:
  - Exclude inner classes annotated with @Nested from
    ClassCanBeStatic rule #956
  - Optimize VisitorState#getSymbolFromName #3504
  - ClassCanBeStatic: Exclude JUnit @Nested classes #3654
  - BadImport: flag static import of newInstance methods #3703
  - Support given for enforcing DirectInvocationOnMock: issue
    3396 #3731
  - Handle yield statement case in ASTHelpers#targetType #3737
  - Should ASTHelpers.getSymbol(Tree) be annotated with
    @Nullable? #3760
  - Fix '@' character in javadoc code snippets #3779
  - Replace guava cache with caffeine #3796
  - Discourage APIs locale-dependent APIs like
    String.to{Lower,Upper}Case #3809
  - Introduce StringCaseLocaleUsage check #3813
  * Changes of version 2.18.0:
    + New Checkers: InjectOnBugCheckers, LabelledBreakTarget,
    UnusedLabel, YodaCondition
    + Fixes issues:
  - @SuppressWarnings("InlineFormatString") doesn't work #1650
  - Refaster: support method invocation type argument inlining
    [#2706]
  - java.lang.IllegalArgumentException: Cannot edit synthetic
    AST nodes with specific record constructor #3404
  - Rename class to match filename #3493
  - Optimize VisitorState#getSymbolFromName #3504
  - refactor: refactor bad smell UnusedLabel #3519
  - LambdaFunctionalInterface crash with
    IllegalArgumentException when processing an enum constructor
    taking a lambda #3579
  - Fix JDK 20-ea build compatibility #3610
  - UngroupedOverloads: ignore generated constructors #3632
  - [errorprone 2.17.0] NPE in
    StatementSwitchToExpressionSwitch.analyzeSwitchTree #3638
  - StatementSwitchToExpressionSwitch: handle empty statement
    blocks #3645
  - StatementSwitchToExpressionSwitch: only trigger on
    compatible target versions #3646
  - Fix Finalize bugpattern to match protected finalize() #3652
  - Make MemoizeConstantVisitorStateLookups check suppressible
    [#3690]
  * Changes of version 2.17.0:
    + New Checkers: AvoidObjectArrays, Finalize, IgnoredPureGetter,
    ImpossibleNullComparison, MathAbsoluteNegative, NewFileSystem,
    StatementSwitchToExpressionSwitch, UnqualifiedYield
    + Fixed issues:
  - InvalidParam warning on Javadoc for Java record components
    [#2321]
  - UnusedMethod flags @JsonValue methods as unused #3144
  - UnusedMethod: Add more JPA lifecycle annotations or make
    annotations configurable #3297
  - UnusedMethod: Support additional exempting method
    annotations #3428
  - Have InvalidParam support records #3437
  - Fix -XepDisableAllWarnings flag when passed on its own #3462
  - ASTHelpersSuggestions does not flag call to packge() on
    com.sun.tools.javac.code.Symbol.ClassSymbol #3482
  - @SupressWarnings on record compact constructor causes crash
    [#3494]
  * Changes of version 2.16.0:
    + New Checkers: ASTHelpersSuggestions,
    CanIgnoreReturnValueSuggester, LenientFormatStringValidation,
    UnnecessarilyUsedValue
    + Fixed issues:
  - Avoid using non-ASCII Unicode characters outside of comments
    and literals #3092
  - NullPointerException thrown during analysis #3220
  - NPE analysing new style switch statement (2.14.0) #3225
  - ImmutableChecker handles null types #3267
  - Drop pre-JDK 11 logic from Refaster's Inliner class #3441
  * Changes of version 2.15.0:
    + New Checkers: BuilderReturnThis,
    CanIgnoreReturnValueSuggester, CannotMockFinalClass,
    CannotMockFinalMethod, DirectInvocationOnMock, ExtendsObject,
    MockNotUsedInProduction, NoCanIgnoreReturnValueOnClasses,
    NullArgumentForNonNullParameter, SelfAlwaysReturnsThis,
    UnsafeWildcard, UnusedTypeParameter
  * Changes of version 2.14.0:
    + New checkers: BanJNDI,  EmptyTopLevelDeclaration,
    ErroneousBitwiseExpression,
    FuzzyEqualsShouldNotBeUsedInEqualsMethod, Interruption,
    NullableOnContainingClass
  * Changes of version 2.13.1:
    + Fix a crash in UnnecessaryBoxedVariable
    + Include the unicode character in the diagnostic message
  * Changes of version 2.13.0:
    + Handle all annotations with the simple name Generated in
  - XepDisableWarningsInGeneratedCode
    + Reconcile BugChecker#isSuppressed with suppression handling in
    ErrorProneScanner
    + Fix a bug in enclosingPackage
    + Improve performance of fix application
    + Implicitly treat @AutoBuilder setter methods as
    @CanIgnoreReturnValue.
    + Remove some obsolete checks
    (PublicConstructorForAbstractClass, HashCodeToString)
  * Changes of version 2.12.1:
    + This release adds an infrastructure optimization to AppliedFix
    source code processing.
  * Changes of version 2.12.0:
    + New checks: BoxedPrimitiveEquality, DoubleBraceInitialization,
    IgnoredPureGetter, LockOnBoxedPrimitive, IncorrectMainMethod,
    LongDoubleConversion, RobolectricShadowDirectlyOn,
    StaticAssignmentOfThrowable, UnnecessaryLongToIntConversion,
    Varifier</changelog>
</package>
<package pkgid="9a3f98a44bb1ed8eba8f3d1da9f374e45e528a50963a8c6bb8953bb47f8ed99c" name="grafana-ha-cluster-dashboards" arch="noarch">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="ee3a4bfc8e3c3896b0ed483230daee25abe09d3ec7312ae00cba3c28ad8dd879" name="grafana-ha-cluster-dashboards" arch="src">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="375cd81734de46604894d5aca54d53eb37dbfaafb75732f7de5b94e4f069d467" name="grafana-sap-netweaver-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="b10322f0403904a3e7e38e33e798981ada1e3eb1ca4865eb1c2d4619761d1993" name="grafana-sap-netweaver-dashboards" arch="src">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="c27b15cae1266835bdc11c1556e2539c94b73d6c25d6fdadc410c861d519fc97" name="grafana-sap-providers" arch="noarch">
  <version epoch="0" ver="1.1" rel="150000.1.10.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="3d52f1f47a1a845ba5c4bed9e6bb82d32e68c449101f0b47098c1a8ee4791432" name="grafana-sap-providers" arch="src">
  <version epoch="0" ver="1.1" rel="150000.1.10.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="63512e1432cd2072c45b960e2dfaa26f34ed2bd10ed6a6b3b60587889f2bce2a" name="grafana-sleha-provider" arch="noarch">
  <version epoch="0" ver="1.1.0+git.1605027022.a84d536" rel="150000.1.13.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604923200">- Release 1.1.0
  * Split provider file to own package</changelog>
</package>
<package pkgid="31d819f97747c16afbe9e5ef58b5ace4d5f49f546c2f1ef876f334f23337daa3" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d46dbd0b7c223aff6dec3cd1ce9f284d2ccfa964c506b16c123709ee4a3dd217" name="gstreamer-plugins-base" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="cbca809358968ad3eca48b292d5216949de8f64351044989c7083008b08725c0" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="db6d6851f0cf6ebdc94810a49a5c2230fee05d1d85319b2234824b8b2cad7868" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a11305b6479c3fe1993c5e3e4ea2c6ceecfe4f6a30c6459b0c2bf2a91c617e39" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="45779d7f818a789745a0a4e75ac3aed00d4c6a889cf01ee95dcc4c914b64a65e" name="gstreamer-plugins-base-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="735631b9e7a5f1f19c04585760f8d24dd676e9a2e5b98867df8e5a012de689a9" name="gstreamer-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="227549e30f88784e9538ce7ec0b312da0c163d935c03e95a6483bc65f931301b" name="gstreamer-plugins-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="160ed1284fdb9695ed9a39b393771cd20d5d76ade68e78135bc898535274a50e" name="gstreamer-plugins-base-devel" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8993759248ff4ecb99f22336eb43ce881f13508621270c8c381c3183ac3fe33a" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8d9380bf5ffbe76c15de4dd6f6db9dff7e8fb51f76e2f4c6d304d1cbd547fe13" name="gstreamer-plugins-base-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="67176b1b5abf533c897b2629ca907f17a44157e8308968dadf4c0a6dfb99c9de" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0779bf154f5b825bcb6e161eb45f3e2fb532a040ac52e7a72afbfd801ad5a0bb" name="gtk4" arch="src">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="20507ced1611985804c919afae96055d3fe84633961da5bec8a3bdb65c9e0a52" name="gtk4-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="dfc9c1087a65f6391992cb9c93a7730b675da975a7a392b7c7658b7060122bda" name="gtk4-devel" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="80e9e67a0f5b98e3e2fe6f896889e2d3c0ef7b81041e647342b6361c7bbd0a53" name="gtk4-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="d0c7011676b2dba768afa72e774a6d0f214a04f43b676611bbf6dc60d29960f9" name="gtk4-devel" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="4746e1d01415770c3b9fb2dbbdf1489143065f79a42ec98bd799921af4e08186" name="gtk4-devel" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="1a5cce7a4ea812460979afb0bc164cad4f1463bbe78604a2da1f8383c496ac71" name="gtk4-devel-tools" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="4968c39f655d3fe24b5ea76b367758a834c95535452f8682f54f68b6cfb53a1e" name="gtk4-devel-tools" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="cbb0ad3950e541fd911b265163d07cd541a56fdc4c075af687e2a8cc39018658" name="gtk4-devel-tools" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="440787fde33abb03281e660164e25667b9f4ab99148e4c7f3a963754c4b10c35" name="gtk4-devel-tools" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="84472ad9c1438e97e802eaf1597a064a38abb93c8ce3d6a7408ccdabd4de183a" name="gtk4-docs" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="147500f89fad110fb4cf4f46d78635ebaa3c0df48888447d8fef6abde46c5598" name="gtk4-lang" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="e3887ebb3dfe40cad62e8119d73840958ddf4866bc5d64644a7d1a6c021d9dee" name="gtk4-schema" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="aa35fdc7b0d8de755d45b8d23da55e65d67552dc91cafd6b4cfd5bb18fcff11b" name="gtk4-tools" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="3ba256c6e5c92a85427bf7d1edd227d7558f1724b7fae114f0859d75f6d38f90" name="gtk4-tools" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="c8660eec80c7fb66c744dbf7b3350f130d108e4b06f0ece316e3de12db704537" name="gtk4-tools" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="7734daec5a7d56df66c09228729f8d24e96ec19a2dd8f83f25b4bbc6d5b0aaf2" name="gtk4-tools" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="31e388ae89ea2e7c08cedc765af2fd3becd3cb1f6d3d8c186cb7cccae19c06f1" name="guava" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="0a1cf4ecbbc4488848e8d7c3d2228697bc460a52ad0be95deb0a49b463066070" name="guava" arch="src">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="34142cde6debeb7378e6a814ab45438dae0f600b76f9079599e1ef41f561441a" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="70ca616c0dafd9259d65e4690c378c87e899ab7a0a40fb8f013205cd9df6224a" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="33.1.0" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Clean the spec file and simplify it a bit</changelog>
  <changelog author="fstrba@suse.com" date="1710244800">- Fix version mismatch in the ant build files.</changelog>
  <changelog author="fstrba@suse.com" date="1713355200">- Upgrade to guava 33.1.0
  * Changes of version 33.1.0:
    + Updated our Error Prone dependency to 2.26.1, which includes
    a JPMS-ready jar of annotations. If you use the Error Prone
    annotations in a modular build of your own code, you may need
    to add a requires line for them.
    + base: Added a Duration overload for
    Suppliers.memoizeWithExpiration.
    + base: Deprecated the remaining two overloads of
    Throwables.propagateIfPossible. They won't be deleted, but we
    recommend migrating off them.
    + cache: Fixed a bug that could cause false "recursive load"
    reports during refresh.
    + graph: Changed the return types of transitiveClosure() and
    reachableNodes() to Immutable* types. reachableNodes() already
    returned an immutable object (even though that was not
    reflected in the declared return type); transitiveClosure()
    used to return a mutable object. The old signatures remain
    available, so this change does not break binary compatibility.
    + graph: Changed the behavior of views returned by graph
    accessor methods that take a graph element as input: They now
    throw IllegalStateException when that element is removed from
    the graph.
    + hash: Optimized Checksum-based hash functions for Java 9+.
    + testing: Exposed FakeTicker Duration methods to Android users.
    + util.concurrent: Deprecated the constructors of
    UncheckedExecutionException and ExecutionError that don't
    accept a cause. We won't remove these constructors, but we
    recommend migrating off them, as users of those classes often
    assume that instances will contain a cause.
    + util.concurrent: Improved the correctness of racy accesses for
    J2ObjC users.
  * Changes of version 33.0.0:
    + This version of guava-android contains some package-private
    methods whose signature includes the Java 8 Collector API.
    This is a test to identify any problems before we expose those
    methods publicly to users. Please report any problems that you
    encounter.
    + Changed various classes to catch Exception instead of
    RuntimeException even when only RuntimeException is
    theoretically possible. This can help code that throws
    undeclared exceptions, as some bytecode rewriters (e.g.,
    Robolectric) and languages (e.g., Kotlin) do.
    + Added an Automatic-Module-Name to failureaccess, Guava's one
    strong runtime dependency.
    + reflect: In guava-android only, removed
    Invokable.getAnnotatedReturnType() and
    Parameter.getAnnotatedType(). These methods never worked in an
    Android VM, and to reflect that, they were born @Deprecated,
    @Beta, and @DoNotCall. They're now preventing us from rolling
    out some new Android compatibility testing. This is the only
    binary-incompatible change in this release, and it should have
    no effect in practice. Still, we bump the major version number
    to follow Semantic Versioning.
    + util.concurrent: Changed our implementations to avoid eagerly
    initializing loggers during class loading. This can help
    performance, especially under Android.
  * Changes of version 32.1.3:
    + Changed Gradle Metadata to include dependency versions
    directly. This may address "Could not find some-dependency"
    errors that some users have reported (which might be a result
    of users' excluding guava-parent).
    + collect: Changed Multisets.unmodifiableMultiset(set)
    .removeIf(predicate) to throw an exception always, even if
    nothing matches predicate.
    + graph: Fixed the behavior of Graph/ValueGraph views for a node
    when that node is removed from the graph.
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows services, a rare use case. (The fix actually covers
    only Java 9+ because Java 8 would require an additional
    approach. Let us know if you need support under Java 8.)
    + net: Made MediaType.parse allow and skip over whitespace
    around the / and = separator tokens in addition to the ;
    separator, for which it was already being allowed.
    + util.concurrent: Tweaked Futures.getChecked
    constructor-selection behavior: The method continues to prefer
    to call constructors with a String parameter, but now it
    breaks ties based on whether the constructor has a Throwable
    parameter. Beyond that, the choice of constructor remains
    undefined. (For this and other reasons, we discourage the use
    of getChecked.)
  * Changes of version 32.1.2:
    + Removed the section of our Gradle metadata that caused Gradle
    to report conflicts with listenablefuture.
    + Changed our Maven project to avoid affecting which version of
    Mockito our Gradle users see.
    + collect: Under J2CL, exposed ImmutableList and ImmutableSet
    methods copyOf and of for JavaScript usage.
    + net: Optimized InternetDomainName construction.
  * Changes of version 32.1.1:
    + Fixed our broken Gradle metadata from 32.1.0. Sorry again for
    the trouble. If you use Gradle, please still read the release
    notes from that version: You may still see errors from the new
    checking that the metadata enables, and the release notes
    discuss how to fix those errors.
  * Changes of version 32.1.0:
    + collect: Tweaked more nullness annotations.
    + hash: Enhanced crc32c() to use Java's hardware-accelerated
    implementation where available.
    + util.concurrent: Added Duration-based default methods to
    ListeningExecutorService.
    + Began updating Javadoc to focus less on APIs that have been
    superseded by additions to the JDK. We're also looking to add
    more documentation that directs users to JDK equivalents for
    our APIs. Further PRs welcome!
    + Fixed some problems with using Guava from a Java Agent.
    (But we don't test that configuration, and we don't know how
    well we'll be able to keep it working.)
    + Fixed BootstrapMethodError when using CacheBuilder from a
    custom system class loader. (As with the previous item,
    we're not sure how well we'll be able to keep this use case
    working.)
    + Suppressed a harmless unusable-by-js warning seen by users of
    guava-gwt.</changelog>
</package>
<package pkgid="d21d587b34a07cace44d8b542b7fdbae1244919870d8e2c025d5773f21bc9d0a" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e06a2d0ae6a47d8290f7a99544049715bbfe545f97fb729c9dea2455a54683ec" name="hamcrest" arch="src">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382356800">- Update to 1.3
  bugfix and feature update, see CHANGES.txt for details
- Removed patches
  * hamcrest-1.1-build.patch
    + renamed to hamcrest-1.3-build.patch
  * hamcrest-1.1-no-jarjar.patch
    + renamed to hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.1-no-integration.patch
    + renamed to hamcrest-1.3-no-integration.patch
- Added patches
  * hamcrest-1.3-javadoc.patch
- Updated poms and added OSGI manifests from Fedora</changelog>
  <changelog author="mvyskocil@suse.com" date="1383048000">- drop junit from dependencies, it's not needed and cause a build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1402920000">- Add patch to fix random build errors by enforcing single thread.
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e6ebdeb08b26a67d98e4c20d41263290100678ad9aa0963f8e2b08cc24a67e3c" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="7caf42e87eff003a32793a1e8b37df8003472a9a2e606c3297c96e16e5542d18" name="hamcrest" arch="src">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382356800">- Update to 1.3
  bugfix and feature update, see CHANGES.txt for details
- Removed patches
  * hamcrest-1.1-build.patch
    + renamed to hamcrest-1.3-build.patch
  * hamcrest-1.1-no-jarjar.patch
    + renamed to hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.1-no-integration.patch
    + renamed to hamcrest-1.3-no-integration.patch
- Added patches
  * hamcrest-1.3-javadoc.patch
- Updated poms and added OSGI manifests from Fedora</changelog>
  <changelog author="mvyskocil@suse.com" date="1383048000">- drop junit from dependencies, it's not needed and cause a build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1402920000">- Add patch to fix random build errors by enforcing single thread.
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="79f6d46a2198bb7a464f7b971f41611a799917826e9845b83fca8ae1deedc7a2" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.13.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ab65cb6caf187705a9dc04c62417ca7c6542c438da49cdebd36fa8a7225e0036" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="150200.12.17.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix homepage
- Update to build with new javapacakges-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Apply patch from fedora:
  * hamcrest-1.3-fork-javac.patch</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Modified patch:
  * hamcrest-1.3-fork-javac.patch
    + Specify java target level 1.6 in order to allow building
    with jdk9
- Specify java source level 1.6 in order to allow building with
  jdk9
- Added patch:
  * hamcrest-1.3-javadoc9.patch
    + fix javadoc errors that are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * hamcrest-1.3-javadoc10.patch
    + Fix build with jdk10's javadoc that ends in error when a
    link cannot be downloaded</changelog>
  <changelog author="fstrba@suse.com" date="1546603200">- Use sources from github, which are accessible
- Do not build the hamcrest-text empty jar
- Split a core package off the main package
- Added patch:
  * hamcrest-1.3-qdox-2.0.patch
    + Fix build against QDox 2.0
- Removed patch:
  * hamcrest-1.3-no-integration.patch
    + Not needed any more since integration is buildable
- Modified patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-random-build-crash.patch</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Make jmock and easymock integration opt-in (bsc#1121956)</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Remove references to the hamcrest-parent pom and do not
  distribute it
  * useless since we don't build with maven
  * creates problems with gradle connector</changelog>
  <changelog author="pmonreal@suse.com" date="1605614400">- Add obsoletes in core to fix updates. [bsc#1174544]</changelog>
  <changelog author="pmonreal@suse.com" date="1605787200">- Fix RPM Lint complaint: summary-ended-with-dot</changelog>
  <changelog author="pmonreal@suse.com" date="1609848000">- Fix typo in hamcrest-core description [bsc#1179994]</changelog>
  <changelog author="pmonreal@suse.com" date="1609848001">- Make hamcrest build reproducibly [bsc#1120493]
- Add hamcrest-reproducible-builds.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * hamcrest-1.3-build.patch
    + Build with source/target levels 8
- Added patch:
  * hamcrest-matchers.patch
    + Fix build with jdk17</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Upgrade to upstream version 2.2
  * After a long hiatus without releases, this version simplifies
    the packaging of Hamcrest into a single jar. Other big changes
    include Java 9 module compatibility, along with numerous other
    improvements and bug fixes.
  * Breaking Changes
    + Although the class API has not changed since Hamcrest 1.3, the
    way that the project is packaged has changed. Refer to the
    Hamcrest Distributables documentation for more information,
    and in particular the section on Upgrading from Hamcrest 1.x
    + The org.hamcrest.Factory annotation has been removed
    (it should not be used in client code)
  * Improvements
    + AllOf/AnyOf: Pass the matchers to constructor using varargs
    + Matchers.anyOf: Fix generic bounds compatibility for JDK 11
    + AssertionError message is unhelpful when match fails for byte
    type
    + Use platform specific line breaks
    + Build now checks for consistent use of spaces
  * Changes
    + Fix compatibility issue for development with Android D8
    + Fix typo in license name
    + 1.3 compatible constructors for string matchers
    + Fix for split packages with Java 9 modules
    + Documentation updates
    + Add implementation for CharSequence length matcher
    + Fix for TypeSafeDiagnosingMatcher can't detect generic types
    for subclass
    + Renamed IsCollectionContaining to IsIterableContaining
    + Make Hamcrest an OSGI bundle
    + Add StringRegularExpression matcher
    + Fix StringContainsInOrder to detect if a repeated pattern is
    missing
    + Add ArrayAsIterableMatcher
    + Fix description for IsEqualIgnoringCase
    + Fix JavaDoc examples
    + Upgraded to Java 7
    + Build with Gradle
    + Deprecate IsCollectionContaining and IsArrayContainingXXX
    + Removed deprecated methods from previous release
    + Improve mismatch description of hasItem/hasItems
    + General improvements to mismatch descriptions
    + Several JavaDoc improvements and corrections
    + Deprecated several matcher factory methods of the for "isXyz"
    + Fix address doclint errors reported in JDK 1.8
    + Fix Iterable contains in order is null-safe
    + Added equalToObject() (i.e. unchecked) method
    + Fix arrayContaining(null, null) cause NullPointerException
  * Fix string matching on regular expressions
  * Fix isCloseTo() shows wrong delta in mismatch description
  * Fix add untyped version of equalTo, named equalToObject
  * Implement IsEmptyMap, IsMapWithSize
  * Fix IsArray.describeMismatchSafely() should use
    Matcher.describeMismatch
  * Add Matcher implementation for files
  * Fix NPE in IsIterableContainingInOrder
- Removed patches:
  * hamcrest-1.3-build.patch
  * hamcrest-1.3-fork-javac.patch
  * hamcrest-1.3-javadoc.patch
  * hamcrest-1.3-javadoc10.patch
  * hamcrest-1.3-javadoc9.patch
  * hamcrest-1.3-no-jarjar.patch
  * hamcrest-1.3-qdox-2.0.patch
  * hamcrest-1.3-random-build-crash.patch
  * hamcrest-reproducible-builds.patch
    + not needed with the new version
- Modified patch:
  * hamcrest-matchers.patch -&gt; 0001-Fix-build-with-OpenJDK-11.patch
    + adapt to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8d66dc65a0d0040b28508e29b95a1819002b58c66eb1159575be192e49529ea2" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="d38fbdd19bd22f87eea639b6e275a3191ba5005f542c0167a0ceb101707caad7" name="iputils" arch="ppc64le">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="4eab822c2c43ab94e4151fcd03047f9b9421501a31bde50809cdaec5b47e147f" name="iputils" arch="s390x">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="cd559d2063b0bfc7b52cfe8205520378afa0631d9994a84bef96f9ac8becba12" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="612d0b51622d91c24a9d8e4988faf8c4f988877200b98e41a1117fb7d259c403" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="cb4612f6bb7d4dfcf2ccc261dd1abae421aa7b16b1fa32e7ad3486023f064d8d" name="java-1_8_0-ibm" arch="src">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="0f0c6326562dc9942bec0d055a54ebae87c72e023b5bd332fe884251f90d15c1" name="java-1_8_0-ibm" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="a3a694110d5f69c802c21e6389c24472766afe1a83dfc2c8717bdeb2f2d78c05" name="java-1_8_0-ibm" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="749509bce19101a531e7f1042efc21d5948c0baeabc98a9cfea3fc096f4ede42" name="java-1_8_0-ibm" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="ae641e55e6efc7561b7a702fa2fc7d09ad4111a56692cf0a27d57d4abcf84351" name="java-1_8_0-ibm-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="ed0556afa1b77b9896e66d201a6817a960b0acc770f041590135369c14b3d937" name="java-1_8_0-ibm-alsa" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="3293df309163c05d9102bf9aaee76dc05aa137d5834b2e5af512a315e5a235c0" name="java-1_8_0-ibm-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="4e402ae0ca94e71bd9182d4b64410be5a9cc4a14af44c44a810908acad6c01b9" name="java-1_8_0-ibm-demo" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="fca4b8f702cb70c43a0e794b1984640437146a6cf6b4cb6bd22849ad57f784e6" name="java-1_8_0-ibm-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="8e7e9ea0910ac1efc6cfe25fa69e75692b4781b3c0cac34d68aa0315a9064421" name="java-1_8_0-ibm-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="7877a5b7ae3dd781e760145d9ba826ac126551bdcbb15a5cfbf4b8bbb446bf23" name="java-1_8_0-ibm-devel" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="57f0f8f2114110bcc855f11a8eeb9566c17d517c1ca45f2d826a861cd4123fee" name="java-1_8_0-ibm-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="c2515bdf816ef6c6b2ae8024ee25491be10e82884bfea5077847d290897a9a2c" name="java-1_8_0-ibm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="b4e6bdf1bdcb9de292cf6046e82edefc04ba84f8f0acea68f0f6840a037f6a75" name="java-1_8_0-ibm-plugin" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="f77a61886369918882e7ccdad188972ed55951bc6fdf8d78b007f00f44d39893" name="java-1_8_0-ibm-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="283aaa7a57cd8a34fc2166ace864e10f324c263f692d3547801404ae145e89b1" name="java-1_8_0-ibm-src" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="8be013cfe28b5784ed611024e441bf8d166f886b2aa23b6d5dff9b96cc99e48a" name="java-1_8_0-ibm-src" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.25" rel="150000.3.89.1"/>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- Update to Java 8.0 Service Refresh 8 Fix Pack 10 [bsc#1213541]
  * Security fixes:
    [bsc#1213475, CVE-2023-22041] [bsc#1213482, CVE-2023-22049]
    [bsc#1213481, CVE-2023-22045] [bsc#1213479, CVE-2023-22044]
    [bsc#1213474, CVE-2023-22036] [bsc#1207922, CVE-2023-25193]
    [bsc#1213473, CVE-2023-22006]</changelog>
  <changelog author="pmonreal@suse.com" date="1692619201">- IBM Security Update August 2023:
  * [bsc#1214431, bsc#1213934, CVE-2022-40609]
  * IBM SDK, Java Technology Edition could allow a remote attacker
    to execute arbitrary code on the system, caused by an unsafe
    deserialization flaw.
  * Note that, this vulnerability was fixed in the already released
    version 8.0.8.5 as reported in the IBM advisory, adding the
    reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1695902400">- Update to Java 8.0 Service Refresh 8 Fix Pack 11
  * Defect Fixes:
  - IJ47696 Class Libraries: Code conversion issue for graphic
    data type for the data ranging from 0x0040 and 0x0042 to 0x00f9
  - IJ47427 JIT Compiler: Crash with adjacent malformed objects
  - IJ47675 JIT Compiler: JAVA JIT: Divide by zero in
    computeThreadCpuUtilOverLastNns()
  - IJ48654 JIT Compiler: JAVA JIT: GC crash in doStackSlot()
    on POWER10
  - PH57123 z/OS Extentions: IBMPKCS11Impl fails to initialize
    after customer migrated from z/OS 2.5 to z/OS 3.1</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to Java 8.0 Service Refresh 8 Fix Pack 15:
  * Oracle October 17 2023 CPU [bsc#1216640]
  * IBM Security Update October 2023 [bsc#1216640]
  * IBM Java idlj compiler switch definition because IBM java idlj
    seems to confuse char and wchar for typedef types [bsc#1204264]
  * Security fixes:
  - [bsc#1216374, CVE-2023-22081] Enhanced TLS connections
  - [bsc#1216379, CVE-2023-22067] IOR deserialization issue
    in CORBA
  - [bsc#1216339, CVE-2023-22025] Memory corruption issue on
    x86_64 with AVX-512
  - [bsc#1217214, CVE-2023-5676] Receiving a signal before
    initialization may lead to an infinite loop or unexpected
    crash.
  * Defect Fixes:
  - IJ47667 Class Libraries: Add/Edit property to write stdout/stderr
    messages via file streams
  - IJ48028 Class Libraries: IBM JAVA IDLJ COMPILER ENCOUNTER AMBIGUITY
    BETWEEN CHAR AND WCHAR FOR TYPDEF TYPES
  - IJ48844 Class Libraries: IMPROVE PERFORMANCE OF
    JAVA.LANG.PACKAGE CLASS WHEN LOOKING UP CACHED PACKAGES
  - IJ49091 Class Libraries: RFE: KERBEROS PRINCIPAL NAME
    CANONICALIZATION AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47751 Java Virtual Machine: ASSERTION FAILURE AT
    PARALLELSCAVENGETASK.CPP:120
  - IJ48453 Security: IBMJCEPLUS/IBMJCEPLUSFIPS PROVIDERS, DURING
    AESGCM, THROW AN INCORRECT ILLEGALSTATEEXCEPTION:CIPHER NOT
    INITIALIZED
  - IJ47691 Security: JGSS: HIGH MEMORY USE FROM LSACONNECTUNTRUSTED()
    CALLS IN NATIVECREDS.DLL
  - IJ48749 Security: KEYTOOL ERROR WHEN A KEYSTORE IS CREATED WITH
    '-EXT EXTENDEDKEYUSAGE=SERVERAUTH'
  - IJ49092 Security: RFE: KERBEROS PRINCIPAL NAME CANONICALIZATION
    AND CROSS-REALM REFERRALS (RFC 6806, SECTION 8)
  - IJ47941 Security: STRICT ENFORCEMENT OF RFC 5246 - TLS 1.2
    SECTION 7.4.1.4.1. SIGNATURE ALGORITHMS
  - PH55605 z/OS Extentions: ECDSA SIGNATURE SUPPORT FOR IBMJCEHYBRID
  - PH55999 z/OS Extentions: JAVA8 - ENCOUNTERING -430 ON FUNCTION
    DB2XML.HTTPGETCLOB
  - PH56022 z/OS Extentions: TLSV1.3 SUPPORT USING RACF RSA HARDWARE
    AND SOFTWARE KEYS WITH DIFFERENT SIGNING ALGORITHMS</changelog>
  <changelog author="pmonreal@suse.com" date="1707998400">- Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
  * www.ibm.com/support/pages/java-sdk-security-vulnerabilities
  * Security fixes in IBM Security Update February 2024:
  - [bsc#1219843, CVE-2023-33850]
  * Security fixes in Oracle January 16 2024 CPU:
  - [bsc#1218908, CVE-2024-20932] OpenJDK: incorrect handling of ZIP
    files with duplicate entries (8276123)
  - [bsc#1218911, CVE-2024-20952] OpenJDK: RSA padding issue and
    timing side-channel attack against TLS (8317547)
  - [bsc#1218907, CVE-2024-20918] OpenJDK: array out-of-bounds access
    due to missing range check in C1 compiler (8314468)
  - [bsc#1218905 , CVE-2024-20921] OpenJDK: range check loop
    optimization issue (8314307)
  - [bsc#1218903, CVE-2024-20919] OpenJDK: JVM class file verifier
    flaw allows unverified bytecode execution (8314295)
  - [bsc#1218906, CVE-2024-20926] OpenJDK: arbitrary Java code
    execution in Nashorn (8314284)
  - [bsc#1218909, CVE-2024-20945] OpenJDK: logging of digital
    signature private keys (8316976)
  * Defect Fixes:
  - IJ48866 Java JIT: Crash due to stale data running on power
    or aarch64 cpus
  - IJ49451 Service, Build, Packaging and Deliver:
    The /usr/lpp/java/current symlink is not created when the
    semeru17 or 11 ptf package is installed on Z/OS
  - IJ50007 Java 8/Integration: Unable to launch applet while
    using java8 windows MSI
  - IJ49634 Class Libraries: Remove the com.ibm.disableludclrefresh
    system property
  - IJ49047 JIT Compiler: Reordering code with a call to
    currenttimemillis() can result in inaccurate results
  - IJ49741 JIT Compiler: Unexpected nullpointerexception
  - IJ49090 Security: +JAZZ-150121 JGSS: Error bad tgs server
    instance due to invalid cross-realm referral tgt in krb5.ccache
  - IJ49974 Security: Add password based encryption (PBE) to IBMJCEPlus
  - IJ48865 Security: Always upper case the XDH curve names X448 and X25519
  - IJ49126 Security: Cached exception was not cleared while creating sslcontext
  - IJ48893 Security: EC named curve not disabled when specified on the
    jdk.disabled.namedcurves or jdk.tls.disabledalgorithms security property
  - IJ49480 Security: Encrypting and decrypting empty string with RSA key fails
  - IJ49450 Security: Increase minimum legacy ephemeral DH
  - IJ49514 Security: Print debug statement if FIPS 140-3 enabled
  - IJ49116 Security: Use server cipher suites preference by default</changelog>
  <changelog author="pmonreal@suse.com" date="1710849600">- Update to Java 8.0 Service Refresh 8 Fix Pack 21:
  * Defect Fixes:
  - IJ49911 Java Virtual Machine: string comparison failures
    caused by string compression
  - IJ50275 Reliability and Serviceability: thread stack corruption
    while generating javacores leading to unexpected behaviour</changelog>
  <changelog author="pmonreal@suse.com" date="1716206400">- Update to Java 8.0 Service Refresh 8 Fix Pack 25: [bsc#1223470]
  * IBM Security Update May 2024:
  - [CVE-2023-38264, bsc#1224164] Object Request Broker (ORB) denial of service
  * Oracle April 16 2024 CPU:
  - [CVE-2024-21094, bsc#1222986] C2 compilation fails with "Exceeded _node_regs array"
  - [CVE-2024-21068, bsc#1222983] Integer overflow in C1 compiler address generation
  - [CVE-2024-21085, bsc#1222984] Pack200 excessive memory allocation
  - [CVE-2024-21011, bsc#1222979] Long Exception message leading to crash
  - [CVE-2024-21012, bsc#1222987] HTTP/2 client improper reverse DNS lookup
  * Full changelog:
  - www.ibm.com/support/pages/java-sdk-fixes-version-80#SR8FP25</changelog>
</package>
<package pkgid="19ef32a3f83d275f80148cdab5c67e8a721a2deb8e7159dcf58014bd17f591e2" name="java-1_8_0-openj9" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="bcc44b417e462c39a49265498ebb994d626360ea588693b0cdf187644bcd3810" name="java-1_8_0-openj9" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="00461d3885fbf1827e963d10ed4685ec88e5c3f448bdf26f3fa892a5076e004c" name="java-1_8_0-openj9" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="9f2af481a7a3b1d599e2761ec7e9ec8efe70631cde7114a35b345ab2a8597d37" name="java-1_8_0-openj9" arch="src">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="2b49d5ddbb1f4576ae8775d1f52f4a70d8ea7c56d3e00bebe5941dc1c2337e9e" name="java-1_8_0-openj9" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="9d51e3960f9ca1900222254fb7db324c9321e648e3a4275e38fac50952aa930a" name="java-1_8_0-openj9-accessibility" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="024e32eae37489ce699e99473da10e6546648840cf071c319bebcac735538927" name="java-1_8_0-openj9-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="854d6c6ab0e7388f80ba6a5a569a03290e5332ee937bcc097fdba6c0bd52c14b" name="java-1_8_0-openj9-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="fb421e7c12b17791a4871cc6144808d7b5a83be13705e938a8d5a57324acacfd" name="java-1_8_0-openj9-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="4ca621d56ab90e7624c922b59876c50ed303bff6ebb32b5d9b8aef6f526311ef" name="java-1_8_0-openj9-demo" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="b2642fa8a42646a8a27539654b635dcb939d3e448086aecf46a6d5086ec803ca" name="java-1_8_0-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="4da43c2b4f1dbb42f7645cb939e59aacaf2ed7c404c52ee5c08f8bab2cee25ce" name="java-1_8_0-openj9-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="db1f599affac281498e92d9226235d2f6067b6493505ee6d7069a9001e9533c4" name="java-1_8_0-openj9-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="1055bc7fed8f6b799164c6a74146d17060703364cd91ab8a988d81ce11d57e3e" name="java-1_8_0-openj9-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="007817d245216cef7468b3f31d74a2ed03233d1fe6c8d7265d1bc7c4c726c6e9" name="java-1_8_0-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="664a5b6093871c9d1f891bd6398f154ee0d4e603f65a0de0a6deae6a30e146d6" name="java-1_8_0-openj9-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="67d8ecfe9e7c8a94c5033e3a92ca79e0122c794067a17953ecac02a86a0e4057" name="java-1_8_0-openj9-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="05e8410f301ae1ed80372a1d237b6a7c20ced8150d4d9c035017ef159a2fbfd1" name="java-1_8_0-openj9-headless" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="87c87c85890f8ad34dd92997dc4ecbac7738435250daef08d068a91addd059f5" name="java-1_8_0-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="14dab8d210badad9ea53abeb0d15cac46d005f8b6fa1f48730959e68bf414483" name="java-1_8_0-openj9-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="cb32e432b9ef8805bd52db485749f0e707b9c3e1436ccd65fadadb4216f94ae0" name="java-1_8_0-openj9-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="a535ecff99e1cc6d4ae0cc0efab5c34322904c99488858ddb5edcfc55168c457" name="java-1_8_0-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="ff6c8d89f9020099f9d9a0db15b3c43e3df69ed4910d51d21144723b2bf6cc73" name="java-1_8_0-openj9-src" arch="aarch64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="585012711131a45c65ccd1668840c842a079ea9b6241f44eeaedf83cdbb182de" name="java-1_8_0-openj9-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="7cbe345924b4cdd51ae164452b4efda0955bd9d96d3e1732677cfeaa61536384" name="java-1_8_0-openj9-src" arch="s390x">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="e8109e8ec0c1dbf16348ebfe3aa14c6be346ecbb8872b75eef671a945644ce78" name="java-1_8_0-openj9-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.412" rel="150200.3.45.2"/>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055,
    CVE-2021-2163 and bsc#1185056, CVE-2021-2161)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
  <changelog author="fstrba@suse.com" date="1623326400">- Force DWARF version 4 when building with gcc &gt;= 11
  * the internal omr tools set error with debugging information
    in DWARF5 format
  * fixes build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format
- Expand supported architectures to aarch64</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual
  machine
  * including Oracle July 2021 and October 2021 CPU changes
    CVE-2021-2341 (bsc#1188564), CVE-2021-2369 (bsc#1188565),
    CVE-2021-2388 (bsc#1188566), CVE-2021-35550 (bsc#1191901),
    CVE-2021-35565 (bsc#1191909), CVE-2021-35556 (bsc#1191910),
    CVE-2021-35559 (bsc#1191911), CVE-2021-35561 (bsc#1191912),
    CVE-2021-35564 (bsc#1191913), CVE-2021-35567 (bsc#1191903),
    CVE-2021-35578 (bsc#1191904), CVE-2021-35586 (bsc#1191914),
    CVE-2021-35603 (bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * jdk-gcc-warnings.patch
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1646049600">- Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0 virtual
  machine
  * including Oracle January 2022 CPU changes
    CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930),
    CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925),
    CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934),
    CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931),
    CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940),
    CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929),
    CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927),
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.30
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="fstrba@suse.com" date="1657627200">- Update to OpenJDK 8u332 build 09 with OpenJ9 0.32.0 virtual
  machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="fstrba@suse.com" date="1660651200">- Update to OpenJDK 8u345 build 01 with OpenJ9 0.33.0 virtual
  machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="fstrba@suse.com" date="1667217600">- Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual
  machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21619 (bsc#1204473), CVE-2022-21626 (bsc#1204471),
    CVE-2022-21624 (bsc#1204475), CVE-2022-21628 (bsc#1204472)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="fstrba@suse.com" date="1678104000">- Update to OpenJDK 8u362 build 09 with OpenJ9 0.36.0 virtual
  machine
- Including Oracle January 2023 CPU changes
  CVE-2023-21830 (bsc#1207249), CVE-2023-21843 (bsc#1207248)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36/</changelog>
  <changelog author="fstrba@suse.com" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="fstrba@suse.com" date="1691409600">- Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual
  machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Update to OpenJDK 8u382 build 05 with OpenJ9 0.40.0 virtual
  machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1700654400">- Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual
  machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22067 (bsc#1216379), CVE-2023-22081 (bsc#1216374)
- Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41
- Removed patch:
  * link-with-as-needed.patch
    + big part not needed anymore besides one hunk integrated into
    system-libjpeg.patch
- Modified patch:
  * system-libjpeg.patch
    + rediff and integrate one hunk from link-with-as-needed.patch</changelog>
  <changelog author="fstrba@suse.com" date="1707739200">- Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual
  machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1709812800">- Removed patch:
  * alternative-path-to-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="fstrba@suse.com" date="1714996800">- Added patch:
  * fix-build-with-gcc14.patch
    + fix build with gcc14
    + pointer/integer type precision</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
  machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
    CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://eclipse.dev/openj9/docs/version0.44
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
</package>
<package pkgid="9e4b79fd2e9a1fd200601511a84c667d7bde63d523217accf06ae4d8e4315f8c" name="jaxen" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150200.5.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242129600">- Initial packaging of jaxen-bootstrap in SUSE (from jpp 5.0)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- Used dom4j-1.6.1-debian.tar.bz2 for build
  It does not contains a license problematic parts</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Build with java target and source level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8
- Clean-up the build system
- Removed patch:
  * jaxen-bootstrap-project_xml.patch
    + not needed in the rewamped build system</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Move to a jaxen multibuild package where the *-bootstrap version
  is one of the flavours
- Update to 1.2.0
  * org.w3c.dom UserDataHandler interface is no longer bundled
    since it's available in Java 1.5 and later
  * org.jaxen.pattern package has been deprecated and is scheduled
    for removal in 2.0</changelog>
  <changelog author="fstrba@suse.com" date="1695384000">- Upgrade to version 2.0.0
  * Changes:
    + Despite the major version bump, this should be a drop in
    replacement for almost every project, The two major possible
    incompatibilities are:
    ° The minimum supported Java version is now 1.5, up from 1.4
    in 1.2.0 and 1.3 in 1.1.6.
    ° dom4j, XOM, and JDOM are now optional dependencies so if a
    project was depending on them to be loaded transitively it
    will need to add explicit dependencies to build.
    + On the plus side, this makes classpaths much smaller and less
    complex, and will shut up a lot of noise from static analysis
    tools.
    + In addition the Jaxen core code is also a little smaller and
    has fixed a few minor bugs in XPath evaluation, mostly weird
    cases found by fuzzing that are unlikely to arise in practice.</changelog>
</package>
<package pkgid="57e1474ad1bb0650014c7d8dccba3708786d29cdf99ee47792ee8da27aac3ae5" name="jaxen" arch="src">
  <version epoch="0" ver="2.0.0" rel="150200.5.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242129600">- Initial packaging of jaxen-bootstrap in SUSE (from jpp 5.0)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- Used dom4j-1.6.1-debian.tar.bz2 for build
  It does not contains a license problematic parts</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Build with java target and source level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8
- Clean-up the build system
- Removed patch:
  * jaxen-bootstrap-project_xml.patch
    + not needed in the rewamped build system</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Move to a jaxen multibuild package where the *-bootstrap version
  is one of the flavours
- Update to 1.2.0
  * org.w3c.dom UserDataHandler interface is no longer bundled
    since it's available in Java 1.5 and later
  * org.jaxen.pattern package has been deprecated and is scheduled
    for removal in 2.0</changelog>
  <changelog author="fstrba@suse.com" date="1695384000">- Upgrade to version 2.0.0
  * Changes:
    + Despite the major version bump, this should be a drop in
    replacement for almost every project, The two major possible
    incompatibilities are:
    ° The minimum supported Java version is now 1.5, up from 1.4
    in 1.2.0 and 1.3 in 1.1.6.
    ° dom4j, XOM, and JDOM are now optional dependencies so if a
    project was depending on them to be loaded transitively it
    will need to add explicit dependencies to build.
    + On the plus side, this makes classpaths much smaller and less
    complex, and will shut up a lot of noise from static analysis
    tools.
    + In addition the Jaxen core code is also a little smaller and
    has fixed a few minor bugs in XPath evaluation, mostly weird
    cases found by fuzzing that are unlikely to arise in practice.</changelog>
</package>
<package pkgid="478b2fa1db12acbfb66ea2f632256285441beb2fb0b3e966272ecdd74fff18fe" name="jdom" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="150200.12.8.2"/>
  <changelog author="tchvatal@suse.com" date="1427198400">- Cleanup with spec-cleaner and add debug output</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Fix namespace clash with javapackages-tools on variables</changelog>
  <changelog author="tchvatal@suse.com" date="1427803200">- Provide and obsolete jaxen-bootstrap to avoid file conflict</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Expand the buildignore lines for newer jdk</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Build with javac whose syntax is compatible with OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Fix build with jdk9: specify java source and target level 1.6
- Modified patch:
  * jdom-1.1-build.xml.patch
    + specify java source and target level 1.6
- Add more BuildRequires, in order to build more java files in
  stage 1</changelog>
  <changelog author="fstrba@suse.com" date="1542715200">- Add maven pom files for the distributed jars
- Speed-up build by filtering out the failing files beforehand
  and then building all with one javac invocation</changelog>
  <changelog author="fstrba@suse.com" date="1542715201">- Removed patch:
  * include-glibj.jar.patch
    + The build works since ages without glibj being present, so
    removing any trace of it</changelog>
  <changelog author="fstrba@suse.com" date="1553601600">- Upgrade the jdom component to 1.1.3
- Modified patch:
  * jdom-1.1-build.xml.patch
    + Remove unneeded hunk
- Added patch:
  * jdom-1.1-OSGiManifest.patch
    + Make jdom an OSGi bundle</changelog>
  <changelog author="fstrba@suse.com" date="1573560000">- Add correct requires for the packages so that they pull all
  required artifacts
- Clean up the packaging a bit</changelog>
  <changelog author="schwab@suse.de" date="1617710400">- Increase java stack size to avoid overflow</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update jaxen to version 1.1.6
  * Bug fixes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Alias the xom artifact to the new com.io7m.xom groupId</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Build against standalone jaxb-api on distributions that have
  JDK without the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * jdom-1.1-build.xml.patch
    + Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Build only the jdom package and drop xom, jaxen and saxpath into
  separate standalone packages
- Removed patches:
  * jdom-1.1-build.xml.patch
  * jdom-1.1-xom-get-jaxen.patch
    + not needed with the current package
- Added patches:
  * CVE-2021-33813.patch
    + fix bsc#1187446, CVE-2021-33813: An XXE issue in SAXBuilder
    in JDOM through 2.0.6 allows attackers to cause a denial of
    service via a crafted HTTP request.
  * jdom-crosslink.patch
    + do not link to javadocs on web
  * no-jaxen.patch
    + do not fail to generate javadoc when jaxen is not present
- Modified patch:
  * jdom-1.1-OSGiManifest.patch
    + rediff</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3ee8198a1792fde544a1eca1a83bec374cb0d5a68e8af749ec397cc04bf7c471" name="jdom" arch="src">
  <version epoch="0" ver="1.1.3" rel="150200.12.8.2"/>
  <changelog author="coolo@suse.com" date="1338811200">- remove stray character from xom summary to fix UTF-8 parsing</changelog>
  <changelog author="mvyskocil@suse.cz" date="1339761600">- ignore jdk7 as well</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Cleanup with spec-cleaner and add debug output</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Fix namespace clash with javapackages-tools on variables</changelog>
  <changelog author="tchvatal@suse.com" date="1427803200">- Provide and obsolete jaxen-bootstrap to avoid file conflict</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Expand the buildignore lines for newer jdk</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Build with javac whose syntax is compatible with OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Fix build with jdk9: specify java source and target level 1.6
- Modified patch:
  * jdom-1.1-build.xml.patch
    + specify java source and target level 1.6
- Add more BuildRequires, in order to build more java files in
  stage 1</changelog>
  <changelog author="fstrba@suse.com" date="1542715200">- Add maven pom files for the distributed jars
- Speed-up build by filtering out the failing files beforehand
  and then building all with one javac invocation</changelog>
  <changelog author="fstrba@suse.com" date="1542715201">- Removed patch:
  * include-glibj.jar.patch
    + The build works since ages without glibj being present, so
    removing any trace of it</changelog>
  <changelog author="fstrba@suse.com" date="1553601600">- Upgrade the jdom component to 1.1.3
- Modified patch:
  * jdom-1.1-build.xml.patch
    + Remove unneeded hunk
- Added patch:
  * jdom-1.1-OSGiManifest.patch
    + Make jdom an OSGi bundle</changelog>
  <changelog author="fstrba@suse.com" date="1573560000">- Add correct requires for the packages so that they pull all
  required artifacts
- Clean up the packaging a bit</changelog>
  <changelog author="schwab@suse.de" date="1617710400">- Increase java stack size to avoid overflow</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update jaxen to version 1.1.6
  * Bug fixes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Alias the xom artifact to the new com.io7m.xom groupId</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Build against standalone jaxb-api on distributions that have
  JDK without the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Modified patch:
  * jdom-1.1-build.xml.patch
    + Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Build only the jdom package and drop xom, jaxen and saxpath into
  separate standalone packages
- Removed patches:
  * jdom-1.1-build.xml.patch
  * jdom-1.1-xom-get-jaxen.patch
    + not needed with the current package
- Added patches:
  * CVE-2021-33813.patch
    + fix bsc#1187446, CVE-2021-33813: An XXE issue in SAXBuilder
    in JDOM through 2.0.6 allows attackers to cause a denial of
    service via a crafted HTTP request.
  * jdom-crosslink.patch
    + do not link to javadocs on web
  * no-jaxen.patch
    + do not fail to generate javadoc when jaxen is not present
- Modified patch:
  * jdom-1.1-OSGiManifest.patch
    + rediff</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="993f4068654c15e64e41b097160703a62a43ce63dcf9215c27c3f77def9426ff" name="jopt-simple" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="150200.3.4.3"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of jopt-simple 5.0.4</changelog>
</package>
<package pkgid="faaf9470fe282c49265650f04d27235407a097626edd06d4895bb9740bea59ab" name="jopt-simple" arch="src">
  <version epoch="0" ver="5.0.4" rel="150200.3.4.3"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of jopt-simple 5.0.4</changelog>
</package>
<package pkgid="70ad5836e0bc45fe62d4b9df294ce36ee884255e7404539d882ab415cb760d54" name="jopt-simple-javadoc" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="150200.3.4.3"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of jopt-simple 5.0.4</changelog>
</package>
<package pkgid="c5cf53c30e16bef3a1734ec551ff9e49e2c4c214d8102f182b5657cb067b2f91" name="junit" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.11.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
</package>
<package pkgid="91e9d885536c8391353e15e1533d54b472b6386e7edf6b57866055fb4d021f89" name="junit" arch="src">
  <version epoch="0" ver="4.13.2" rel="150200.3.11.2"/>
  <changelog author="mvyskocil@suse.com" date="1382702400">- Update to 4.11
  * Matchers: Upgrade to Hamcrest 1.3
    no longer included junit jar
  * Parameterized Tests
  * Specify Test execution order
  * New maven artifact 'junit:junit' w/o builtin hamcrest
  * Number of improvements into Rules
- Drop jdk7-testfailure.patch, fixed upstream
- Add junit-no-hamcrest-src.patch, don't bundle hamcrest into junit.jar
- Use SourceUrl for release tarball and pom
- Don't inject OSGI manifest, it breaks junit.jar
- Provide/obsolete package junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
</package>
<package pkgid="89e49b6bc8bdcf9cb2f601f656ebf6051d750bb35f1415cbd318364b334ee9d9" name="junit" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Require hamcrest &gt;= 2.2 to resolve choice of providers</changelog>
</package>
<package pkgid="312b9b40f75ea36a1d42ffdbdfa4b447c724345f08db665f568f7432a9061631" name="junit" arch="src">
  <version epoch="0" ver="4.13.2" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Require hamcrest &gt;= 2.2 to resolve choice of providers</changelog>
</package>
<package pkgid="5c529b987a02f1fbc6396cc2d08721077fc3a78c35d487931839bef49b545dbb" name="junit-javadoc" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.11.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
</package>
<package pkgid="2e5118ae8451294678a78ba348547beeae5ef655afe1cf296228501ae3872464" name="junit-javadoc" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Require hamcrest &gt;= 2.2 to resolve choice of providers</changelog>
</package>
<package pkgid="c3882f0b8ac0d995f17ff649a961abe47e32effef5cc49df75b8a2c3d38d9550" name="junit-manual" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.11.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
</package>
<package pkgid="713093a8a5151e3a744edab3ab3094c314a128ca09303a76d0b2b333017671b8" name="junit-manual" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Add patch to build with jdk8:
  * junit-jdk8.patch</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * junit-jdk9.patch
    + Build with java source and target levels 1.6 in order to
    allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * junit-jdk10.patch
    + Remove a function getInCheck from NoExitSecurityManager,
    since it does not exist in the extended class in jdk10 and is
    deprecated in previous versions</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Harden and fix the test suite:
  + org.framework.junit is deprecated since junit 4.0
  + Ensure we fail check when junit no longer returns what we
    expect it to (error code checking is useless, since Assert
    returns !0, like any other failure to start the test).</changelog>
  <changelog author="fstrba@suse.com" date="1513598402">- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531310400">- Added patch:
  * junit-jdk11.patch
    + Fix build with jdk11
    + Don't override removed SecurityManager methods</changelog>
  <changelog author="fstrba@suse.com" date="1545825600">- Upgrade to 4.12
- Removed patches:
  * junit-jdk8.patch
  * junit-jdk9.patch
  * junit-no-hamcrest-src.patch
    + Integrated directly in the added build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1548072000">- Trim repeated metadata from description.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Add OSGi manifest to the jar file
- Package the manual
- BuildRequire and Require hamcrest-core, since the package does
  strictly depend on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1586260800">- Upgrade to 4.13
- Removed patches:
  * junit-jdk10.patch
  * junit-jdk11.patch
    + not needed with this version</changelog>
  <changelog author="dmueller@suse.com" date="1639310400">- update to 4.13.2:
  * Mark ThreadGroups created by FailOnTimeout as daemon groups
  * Only create ThreadGroups if FailOnTimeout.lookForStuckThread is true.
  * Fix NotSerializableException with AssumptionViolatedException
  * Security fix: TemporaryFolder now limits access to temporary folders on
    Java 1.7 or later (CVE-2020-1945, bsc#1171696)
  * Make FrameworkField constructor public</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Added patch:
  * 0001-Port-to-hamcrest-2.2.patch
    + do not use the org.hamcrest.Factory that was removed in
    hamcrest 2.x and should have been an internal annotation
    only
    + fix some incompatibilities with template types in matchers</changelog>
  <changelog author="fstrba@suse.com" date="1679572800">- Conditionalize the spec file so that junit can be built with
  both hamcrest 1.3 and 2.2 from the same sources</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Let ant build with --release 8 if the compiler knows that option.
  This allows us to avoid incompatible exception declarations
  in ObjectInputStream.GetField.get(String,Object) in java &gt;= 20</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Generate anew the ant build system using the maven pom.xml
- Fetch sources from github by source service and filter out stale
  hamcrest binaries.
- Port to hamcrest 2.2 unconditionally
- Added patch:
  * 0002-remove-usages-of-deprecated-org.junit.Assert.assertT.patch
    + upstream patch to replace deprecated assertThat</changelog>
  <changelog author="fstrba@suse.com" date="1716465600">- Require hamcrest &gt;= 2.2 to resolve choice of providers</changelog>
</package>
<package pkgid="f621ccf64d77f8f8ce008e06f98adde7a6b392a72912366a600e2402e0fdca39" name="junit5" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.3"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="71abbf5e1d94f492927953edc366b5089f269f11bac48e13fe3d0f3598928a4d" name="junit5" arch="src">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.3"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="be815c5eede517229e394125e4cd7c81a4bcc1e0f51e0daf54670d3dd6d4f487" name="junit5-bom" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.3"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="c4d596f636bba70e828570a83e2aed54b105da7fdb6b6fe66e8fe15d3245e2cb" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.3"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="fc7e18f5501611f0131dc2351dcf623e16587e2db243b348cf5380095e000dbe" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.3"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="b1552f95cf962b1ad1ce6cfe9f0c8c09f2504e13e14fae6179f69e974376d550" name="junit5-minimal" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="31ebf9708fde72cddd2d2a6f9b1f3bf0510039c16303c6e2d27f968e91a82daf" name="junit5-minimal" arch="src">
  <version epoch="0" ver="5.10.2" rel="150200.3.10.2"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Added patch:
  * unreported-exception.patch fix unreported exception error that
    is fatal with JDK 21</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1712664000">- Split into two _multibuild packages so that we can use the
  junit-jupiter-api pretty early in the build without creating
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Update to upstream version 5.10.2
  * Changes:
    + XML reports in new Open Test Reporting format
    + Configurable cleanup mode for @TempDir
    + Configurable thread mode for @Timeout
    + Conditional execution based on OS architectures
    + New TestInstancePreConstructCallback extension API
    + Reusable parameter resolution for custom extension methods
    via ExecutableInvoker
    + Parameter injection for @MethodSource methods
    + New IterationSelector
    + Various improvements to ConsoleLauncher
    + Promotion of various experimental APIs to stable
    + New LauncherInterceptor SPI
    + New testfeed details mode for ConsoleLauncher
    + New ConsoleLauncher subcommand for test discovery without
    execution
    + Dry-run mode for test execution
    + New NamespacedHierarchicalStore for use in third-party test
    engines
    + Stacktrace pruning to hide internal JUnit calls
    + New @SelectMethod support in test @Suite classes.
    + New TempDirFactory SPI for customizing how temporary
    directories are created
    +  Failure threshold for @RepeatedTest
    + New convenience base classes for implementing
    ArgumentsProvider and ArgumentConverter
    + Custom class loader support for class/method selectors,
    @MethodSource, @EnabledIf, and @DisabledIf
    + Improved configurability of parallel execution
    + Numerous bug fixes and minor improvements
- Added patches:
  * 0001-Drop-transitive-requirement-on-apiguardian.patch
  * 0002-Add-missing-module-static-requires.patch
    + fix dependencies in module-info.java files
  * 0003-Bump-open-test-reporting-to-0.1.0-M2.patch
    + fix build with the latest open-test-reporting milestone
- Removed patch:
  * unreported-exception.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Let junit5 require junit5-minimal to avoid conflict of providers</changelog>
</package>
<package pkgid="caaf31a76583709ffb31a32744a1c1a22a707e3820534425cfe3ef25276f16f0" name="kiwi-templates-Minimal-s390x" arch="noarch">
  <version epoch="0" ver="15.6" rel="150600.5.4.3"/>
  <changelog author="gmoro@suse.com" date="1671019200">- Initial version for s390x arch</changelog>
  <changelog author="gmoro@suse.com" date="1681992000">- Fix image naming
- Include SUSEConnect and suse-build key</changelog>
  <changelog author="gmoro@suse.com" date="1683720000">- Include OBS-Milestone for images
- Change bundle_format to appropriate tags
- Change dasd and fba images to raw</changelog>
  <changelog author="gmoro@suse.com" date="1691064000">- Bump version to 15 SP6</changelog>
  <changelog author="fvogt@suse.com" date="1697716800">- Remove _service. The keg recipes are too much out of sync
- Remove the /boot/writable subvolume, this is only needed for
  transactional systems
- Add combustion (jsc#PED-5843)
- Add rsyslog (bsc#1215766)
- Add salt-minion (bsc#1215074)
- Install wicked explicitly
- Add "rw" to the kernel cmdline (bsc#1211722)</changelog>
  <changelog author="fvogt@suse.com" date="1697716801">- Don't install kernel-firmware-all (bsc#1215676)
- Add group(wheel) (bsc#1215723)</changelog>
  <changelog author="fvogt@suse.com" date="1702987200">- Add "rw" to the kernel cmdline of remaining flavors</changelog>
  <changelog author="praveenkumar.handigol@suse.com" date="1717502400">- [s390x] firewalld is not running after firstboot (bsc#1223257)</changelog>
</package>
<package pkgid="102a7d0bdf1f18a21717c19dc2873b607761f96e818c5bdf9c9eb6d6ef304f24" name="kiwi-templates-Minimal-s390x" arch="src">
  <version epoch="0" ver="15.6" rel="150600.5.4.3"/>
  <changelog author="gmoro@suse.com" date="1671019200">- Initial version for s390x arch</changelog>
  <changelog author="gmoro@suse.com" date="1681992000">- Fix image naming
- Include SUSEConnect and suse-build key</changelog>
  <changelog author="gmoro@suse.com" date="1683720000">- Include OBS-Milestone for images
- Change bundle_format to appropriate tags
- Change dasd and fba images to raw</changelog>
  <changelog author="gmoro@suse.com" date="1691064000">- Bump version to 15 SP6</changelog>
  <changelog author="fvogt@suse.com" date="1697716800">- Remove _service. The keg recipes are too much out of sync
- Remove the /boot/writable subvolume, this is only needed for
  transactional systems
- Add combustion (jsc#PED-5843)
- Add rsyslog (bsc#1215766)
- Add salt-minion (bsc#1215074)
- Install wicked explicitly
- Add "rw" to the kernel cmdline (bsc#1211722)</changelog>
  <changelog author="fvogt@suse.com" date="1697716801">- Don't install kernel-firmware-all (bsc#1215676)
- Add group(wheel) (bsc#1215723)</changelog>
  <changelog author="fvogt@suse.com" date="1702987200">- Add "rw" to the kernel cmdline of remaining flavors</changelog>
  <changelog author="praveenkumar.handigol@suse.com" date="1717502400">- [s390x] firewalld is not running after firstboot (bsc#1223257)</changelog>
</package>
<package pkgid="ffa83066ee4082afae1e6e60e6dfba11c030b91b4d86bee62e1150c903586e71" name="lib389" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="d9883d3a3a12a7e011007329e87d38bc9d64a39cdacab3ddb85a1aa09b3104ae" name="lib389" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="8be88ae3f77cf0b2c0dece712ad64b578058dc2e8c60d2ec247de6e48cae499a" name="lib389" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="bda5b49bbb3588e54f29ac59ce7eacb7603814e45042d1a1f736f125d72a2897" name="lib389" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="adc033af7965c8b0321701ae9be7bf2bfd1667f26cc3ce4f610609608c873ef1" name="libavcodec-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="0b8f81b0e6b28bbd66f315a4f4fd0ee47dfd390f1f0d0fbe09b28587efe48daa" name="libavcodec-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="0d637325b6c9566c09a6382f55c35d30bbbd4855f9f37948b1f15a0fbd8156a8" name="libavcodec-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="15781551586fbea43f3181185c203329e76303e0ef9ebf9c40551943d2665289" name="libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="d5d1e6d5ff3bc9a8c56a150975bd68f8a435c01ece10ee8a76f07c2a959a1787" name="libavcodec-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8c0e8d9c7571d1b1b0ed28f52d260eb4ebbe636c32d8d99ab0ddd684e0a76572" name="libavcodec-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="bbadcb676f244dbdaf6c781499bdea2aaf4ce533ab8e02ce09d88b1ff394f370" name="libavcodec-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="28e86c76510a47b39fca37c9af801553c8adb7dd8af6b0c8e034ef87746cb992" name="libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="83ea5b976bb4350d9144624c6d693cecb35f234ca33bb451d04a3f4435d51c77" name="libavcodec57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="51be6180bdaee5cc3b64d1d208d0c786bc6b7396556ba7997e06042500c6a39d" name="libavcodec57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="8748accbac635796ae47d3a44c15bfa09d1db3e35b7022bd4b0fd1cc1b9f00a8" name="libavcodec57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="5aed68b2e97c1ae623d3e4168b550a26fdf9ab21b6308a41f34df9d7b19231ab" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="162fce12d5ae72f2ab38a5f138873733d95d31d1f01a2945fc188e76107b15d0" name="libavcodec57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c5659ff8427bb299847b3b687c092a1da79e7252016c52cba753b6709f7489e1" name="libavcodec57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="fbf2ca0cd4d30e1b7c0ea6abeac8ac3217059b0558793db0363cab41935f9060" name="libavcodec57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="15a5b5e3706ed1d6b1247ee82bd87e493cf773cb6cfec35d7927c5427f481395" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b0588bbc826b03a432c7e47fd4623422a78b2f91bd85f28a451c6ea688c346e6" name="libavcodec57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="79c30e288b35947f59bce0fe7111c76003cc6a53438bcd3297f9fb722162b4ce" name="libavcodec57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c50669feb1eca7637a06ef2cd3857f199bd46920c4ee338d15003b8baf9b499e" name="libavcodec58_134-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4e5f27bfa7cd9279ffe00634bfeadccdf8f1eee0d4ebff03ab0290a7bd9848a7" name="libavcodec58_134" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="95182806a9dc34a4b3e97052e8d49b5c44018e56992d3e7f7ce8dd866d319461" name="libavcodec58_134" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="32bd97822b39c7d2394b8d4afb58330b7abbd93f805b5fef511adf81a5628092" name="libavcodec58_134" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="fd881e97b5b38c7353ef2fd8562f39926e0ed5631533e62b5d7c3947f392363b" name="libavcodec58_134" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="abdbfca5a104ee0e56649041aa6a85c4ece39441b17595bdca85ea44bea27731" name="libavdevice-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="0ba22ac97275cf11942abc203f6fe47637feb0a2e3a2f54ec9ff36efdefff3b9" name="libavdevice-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="1b7c50f57e568eb71ac56f3366f6b5a7bf506591f867976059331570db54aa5a" name="libavdevice-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="a85000f98d7228f708df3551b187d2ba2f7a38319264aafc8a0bf39ff0227970" name="libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="2007ba67fee2173838d3a084281af28eda02836f7d16e550b244956ad1523432" name="libavdevice-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b3e3952ba27173ec85ca81c2833daf4b8806a4f695ba02c1bf0389cdf3e86d56" name="libavdevice-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="bc7a87eb829cd67e42420718f4404341e05a522197142cabea5f56385766caab" name="libavdevice-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="90e5ecb4b722d020e33f80f009225eab9e8133d040840884faec7c0e18c556fd" name="libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a6d93f8e88b2412bc4c9fe22c7c274febc81c681d29564cd98859dcc789aab78" name="libavdevice57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="6f3d6500803f5e9335503686724b287761440cdbbacb6663dd3850c722b4b932" name="libavdevice57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="394697004d91e8700a11806b35dd1e33a4382ee3e8d11880c67bc43104434be2" name="libavdevice57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="23f009f713222406cf8720085f89e5d134ef1b82be9f7b407c11e2b1e9ce3e94" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="00afdd4a48c638419f4d92d4eb5bf7b06ec0bc3e803271b4e5d5483c9e288f01" name="libavdevice57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="08d39db7004972f121fad6055f0d614a29160f5246477ed3572a65bb4b1bb1c6" name="libavdevice57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c6aa4e9b8b253217933a83d0af9e199befe60065a6033aad0acb229390aecfb9" name="libavdevice57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c0b35a1f63d24867a83382a64eb73f8c1dcbcfad2e81668a2184d1aa7cbc770c" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a94e62acc893f7a3264c07baf7633ec9481d857e7232f9b4a796903d11f2ff13" name="libavdevice57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="850edbb7f2fd74d1425ecaebf6f43f995b2de8722bc285666bd392ab9555fc1a" name="libavdevice57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="03349a6bcd6de3d08cf84ba969d3736a228e1348145d794306706d447397d867" name="libavdevice58_13-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="86db53cb51705db5eb416e6907a56c1c6485177a5d51191c6b1cb986fa7618f6" name="libavdevice58_13" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e1e2e79fd051d4657fd798884ffe400686eb8708e06234b5fb928b2b67e636fb" name="libavdevice58_13" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d5ac9c739ef1ca1bfb5d09f6b94fccc4687871d0c028df08c5eb9d093751f46b" name="libavdevice58_13" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a8b99bea75a8c5c04adadc7e84423d46736d99097b1a79139017095823613704" name="libavdevice58_13" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="3733d015881421d30c06ccf2b709423579efc2b932d3db906fc2a8000b9b6f17" name="libavfilter-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="6afa1152fe01da96662538e764567a442acda7ed09ec28d740892713d82c5a62" name="libavfilter-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="2c1dbb90f411d7a99a6dee6f426d262b91e7fb5cd7ef6924e7c8f1f61eac3fc6" name="libavfilter-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="ff03fa38f06a7293cddcb582e722e3f51136b85efa992a4559443ea0f467eb1d" name="libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c9b400f8b538155faa33cd39a4a0397093c55ca6ae59783667b2ad1b57e1b13b" name="libavfilter-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="90a665059b7eeaa5a0537ca6e199d943b20b3b9c33e970b569c8a550f2621fb0" name="libavfilter-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8724e263303500f1b10a90e1e6b33edbc9521e8377cf30ff571215cdff984b99" name="libavfilter-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9e2e48259f618dc4d412c75cfb212dd60607d7ba0097858744d9410371fe4f46" name="libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e2b8889e7f13d0254303f7cf7a83e33055b1cb0986e998c02c50afd6b3c5ee00" name="libavfilter6" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="8327925026dc72b4bf7c2d5b8778503ec696a638048b629ec7b90fd79a2af2b5" name="libavfilter6" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="3536b1a0ff33fe8f346b8129481f7627c84276bee692ce7b00e7312986017abd" name="libavfilter6" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f1356a869561338e5d977eab1789cecc9c92face4ce9fafeac38b425460d6a9a" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="38e8fabe14203446feda6fd11839710b890ac4b4e2f3a8c1103f3e14aa3715e9" name="libavfilter6" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="4b5f6a0b3e987332eebb4c15f5528d99e52ddbad5b2aefab7169ba9a68c0a8fb" name="libavfilter6" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="53533e5aa584d6c665353e2b540e61753f8c20af749902c2c87a0883e6bd5e47" name="libavfilter6" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="eb9b66ac9a59c840eb522d629f4ba362e1a7e4550d3f92cc2e9e6cdce1ce1c42" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7368cc77b136873de496544411c4c5698727a593cf7cc1041341746246ff1d4a" name="libavfilter6-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="b8a194c6477d77f514aae398ab2cec86149ea7c3c59ba36bd2c8ea2af4ee798d" name="libavfilter6-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="bbb4ced49d33a2e1df5a13dc0c2e8be4542ca733c160b701e993c746d6a50845" name="libavfilter7_110-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0cf1710d3b396c6951e5c9b504ca008ea7470d5037f6f76bc96bb19e97965138" name="libavfilter7_110" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a90eb0693b9b9f657305ab1905dfed4cdd8859cefe867e727e15f4f422597083" name="libavfilter7_110" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="516bd2cfce5abc985df76abbcb1409e6aefd89f34419c271f77aace7607ec312" name="libavfilter7_110" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c0eb0a0aed2f58791da9f84fc899b6fd6bf118c439e83912b5e792155d93c38f" name="libavfilter7_110" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="842aeebb2fb3dd30590814d5d36c477885a4caa9c8f952dde185343d9ba5b11a" name="libavformat-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="d555f23271ed2dd4ece79883abf77f5a3074053f6abb3580b444c5a70f51ab5e" name="libavformat-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="12e1436598f56ab249c5c3b2470c6249d11d26cc24c12422edb3634c95396eea" name="libavformat-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="da8e8e03a8150f38067dc031ff5894df43818b04befaccbba75cbe34d95e1acb" name="libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="dafb9f0f21f06feeca1f735e0f892009961e4aba0aebfcb034975876335980b7" name="libavformat-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="cab5c0728e6a2eb749be17ec535a5254f5032b572994bc1ccb9f2e9f2c7158da" name="libavformat-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="cda90412e45bbcd22fc921a216824b0a6285b7b4a81a47bae4cf07d4aec1b73e" name="libavformat-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="6fcaa6f23ce6e7a3bf087e9f71f4412ae19312ab113c0b4b1a4426c921dae50e" name="libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="979ba408400e3e8209f2d06833fd9e3bd40fba6476f3e119e2b18d077766c509" name="libavformat57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="68063e2f3b8a2d53cc19aef4c772a77c0715e4966b1bcf687eb029f2586ab065" name="libavformat57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="4afbb42e71cbe9f8c3867a45ae33159671dc145ed2aa35721101cc8efebf28c6" name="libavformat57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="7daf466681e35facf4f257048e08fdcedc779af2045752b4cac3e114803389b3" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="5a920ef7aba22508d625c0e3039177a0b0589239cee98619f7e2e8128d313a78" name="libavformat57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="710af174fe761540a5e11d8967233031fe0466ee1fe5e9cb41d45b8877692b36" name="libavformat57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="162f48b7abb76969c7a4767f6880ea4f5276c6a8cbee8e8994dc94e6fa23c399" name="libavformat57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="646a0c1794776e47e81067f31929ff563b9f6cf781126fa7b93647b65899f9bf" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d7cf66fdc951755c1c2a1e9d9f05ec5cfbc38da64690fd6955f7f3450c496863" name="libavformat57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="28346dde2299f44c45d62df4e4c1e0da8643d78f8bd297d1384251d20bf460e9" name="libavformat57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="80cf1760793ee437ca9641088a0296fcf71cb318f4e54ac5e906a2470858170c" name="libavformat58_76-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9a967ee83a2bf54afb805836a5ef4f7ed459c2c82774a98b1e75cb4b5ff1870a" name="libavformat58_76" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="45da0cdc14b043dd2aa3fe2b0200c2d192aa51f8c7335e10c1b8ed907b4b1af3" name="libavformat58_76" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e4a62ecbce5c27de9c972a9138161944c6fd6c9370d67ae7ff7d1f7c48d3695f" name="libavformat58_76" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="967ef34331426e8ac9b1278b522a710506e8a147ca7c56b3af31094e90fa0223" name="libavformat58_76" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="45e52592e979464dde588921c664a4384a5783d9e6bbcf96d773e09612a4d8fa" name="libavresample-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="a123afee6663edee18dc9e847c51a4c6a5fd5d8ad95f801a63a4750d933c5854" name="libavresample-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f7193f17fc24c60d1cc3810acc56d6416f467775ab726584d86510b0a1143c39" name="libavresample-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="75acc062736baa2077b0847042ada50bb30cca9f183102efb362412ac16ee25b" name="libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="8973a5d39d8f09d630e92e4dda47310cbc62dc3326e7f86427dad2c68ea2493c" name="libavresample-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="47f65447087e48335055b8282a36453c002741459935b384c14a853f1b194306" name="libavresample-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="15abdb7e79982826cef3dbc000a4039e47f0c9842f8d7dedc17c183bc3eef791" name="libavresample-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="84e5256b4db281da5252aa4fbd147ad9df65d2de4d90383f0639a30da7c1b8b6" name="libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="11c09e03ce60dc01e0adc60daea1f5b5fe15a944281ef2c0251858606cbdb4ae" name="libavresample3" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="0c95f1c7eb767278a9d24aa89c05b65ddd4fbbe42ea1c97ff2e7c2b4d065119d" name="libavresample3" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="6e6ff14f66ab9081fe1229685b071a7f7574926e600d59447c43564aba5ea998" name="libavresample3" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="aceed9bdd2fe6675c6e107574678a426029691997b3e25c165a5c5a2a998036f" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c5adadc175c123febf1d4f765dc2ea87f3150a138b081d5cd11eaedae328cf13" name="libavresample3" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="2f03c9879fc491379db2a6c48772d48c269dfd010004c158a92b4f8b8c009314" name="libavresample3" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e50affed7e4cb7ed9ed4b9cdcb3a98273204d75c6717ac5c18467d877bc6a0fc" name="libavresample3" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8d669de3f1a870ee1aad05836c44342be73adc1ed0005996f7e49e654ed32973" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="38462c68bb6d6608eb1d2d30c0a79dc2c935afbfbaaf215306a94d794e2fe729" name="libavresample3-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="537335ed2327c1daca530dba5a257d6854560f7420f8f10d14785da5f915cbb1" name="libavresample3-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="487eee7ffbedaac6c228ac7d9060b9ec52bc259c596989472a060c41690551f8" name="libavresample4_0-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="6ee3a42300cf93b358f4236ad17c11217f143ca7478c8daee5865687814eb779" name="libavresample4_0" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="5b6f2cd0ce269b9d60ff06e3f121c31dfa8122803c33150931ccdac031404f02" name="libavresample4_0" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="51b1915481c7fc152c9092a653f6dde62029e8e64e51a9e138ebae207abc6354" name="libavresample4_0" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="cb09536632330c52a0c2d625924ca41ef42b1fdbde12248ba4579b5d7fdb8890" name="libavresample4_0" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a93f5f83781abd85a73557e5b33d5a4c1d9acb4a17bd23c16b34e3e4323b6675" name="libavutil-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="7042ee74b1aeab95e61bc0d522e820b9686d7bcca24cc96bdf9bab69adebb3c3" name="libavutil-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="4eec4355b1995a91d224d15b2082e475c5d0c72955f82743b07dfa6461ce6885" name="libavutil-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="094fb3787c0e6c7a0da47d346f6b753e69b9774ccc20b6163edbd638f0fad10d" name="libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="a306bc3dcea92a790b3dcfa1414f056898dec9464efa4b09c72e0d80b8660ee8" name="libavutil-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="617796388fa4630a5f6633f4f9f3baca02c24b2abf78ecb948caeba58eb1b1e3" name="libavutil-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9ee70df2440b87e0d297a4efb0d9065709e29a92f00b521c0343c5327efc8c22" name="libavutil-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a609994bd71cdd8d459d870a75519d6041672681c75fbd3442c242e720502634" name="libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7c36441f6ef255b25fe1a781c8c4cd7dcc347f87c99b4217b6af8dfea84b2cd4" name="libavutil55" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="fb86d0a05018a8d042a59f3e237da446481dbb834e74eddcca0f01f15ddcd220" name="libavutil55" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="79463caba83eed4f97aaed0ae6e04d64eb45e566fb6601ff56aaa13855726743" name="libavutil55" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="16728da3167fe81c20981bde14380f7da052bf8294c8815ad10e5030eca41422" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="5695fe5df0a0526bccf7af2e29e52a0e5c30a3da59f07c5a7ebc0d6a6366b7a9" name="libavutil55" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="28d1ac27a1ae3b9d283f7a039875f6fba2aceb83f5e4c7ae0e93e2f297dac33a" name="libavutil55" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1589f5af578572cbf99de901ab0518f0a0e84301eb6c0c28aa5d2a61872c3a43" name="libavutil55" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="92f185daebfbc38029cdded24be19b171d0332f8eb500b90bdd7ce985b2b100a" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9f0f6c1da38ac673bb643e221a710fbe579abcac7c475ac843a7cfd4597fca4a" name="libavutil55-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="4a7ac756814da221b6753448e85010b09620a7e859cc7b9a9ceca7f4979ffeaf" name="libavutil55-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="6fcf9657d7d344259abe59ab0f81ede088f24ab791d92c5cddb0871c083c7ccc" name="libavutil56_70-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="21ad7cdbc97b9bcc0fbce564f8b472c99df9ebcb72bad6452ec185b3f33edef8" name="libavutil56_70" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="f833efd970a6f8904429237ab95c2dfb9ab26504a4b91593223226fabfea2b48" name="libavutil56_70" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="406d10e38d756a83f6975301d512d0288af79ba03742b071dd3bea27a5d61295" name="libavutil56_70" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7313f659e6533df2688ef97b24cfc760130be3636bd42bc93ba261d25dd8da13" name="libavutil56_70" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="de22348574971650e31eb609f596757b677d0a14b5cf76d6be229ba145e41f4a" name="libbcc0" arch="aarch64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="dd68c801cd51d2b129dd2ebb3b7482acf48e9c95ff374dd1cf4f8e64e30a25fe" name="libbcc0" arch="ppc64le">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="5f9a909adc883802984ec29933495b17c71c6cd5bb100577e3a1c9b5d30c49e8" name="libbcc0" arch="s390x">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="fd28605d29ea6d1a766f6c81e6046aced753dca2484a27a730b3259c4f8c2879" name="libbcc0" arch="x86_64">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="4b6423c9cd80bcca8bf0f79225e9f67adddcf4e7cfe1f7881da7a300e3e5fc27" name="libblkid-devel" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="4d2ad7f7dc7568d86ae3db32f6db3f2c187b00577eab2a5f238a4d0c98c80c1e" name="libblkid-devel" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="453512925bb9dcdffc9fd61d01a273f43e65896b8358ab4b07ba8f3c7f7e8912" name="libblkid-devel" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b3e07fb2ace9aa47fe8619a3440546672126cb1c6a9a072790f622e59f7e9c81" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="6d19238a21e8226ff2bbb6ec110128feaebfcf37120b5246cdcdd01e37ba01d9" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="9b73a2c9089b416495093dcdfe9a8d54b8e6ae6e27429528fe04b5d120c514b2" name="libblkid-devel-static" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="80660b02a57f4a3b3b28eada1e7bdfc9337dc871e398a9952ef8d15ea3277777" name="libblkid-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="ab30660f4f4ad453b3491c0d923882627622dad8d5629d9f192176c091efa4e8" name="libblkid-devel-static" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="dbaae1b0bb4f217731974162730cbf57fe24b8f0c59fd22ad294f9312593e5fa" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="54cb44e537a7e64e7499e22d167f623176e7eef2207513fd73ac3bcef6586d20" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="f14e26dcb047ef721b388d49d89961efad7fe454c958b045b720edb29a0fbb91" name="libblkid1" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="ff3dbd34388a241b4c9f869c437c0f6bef878bd718d806ecbb9ac7a3e75e53e0" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="c9c3a9c730ea52cbb0d94fc45f1e605bdb6c7c8be23a51ab960fc65001128d1f" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="1eacef244b6eb08de53ff97078b37e4cd79c810b3d9ab8f1d1e01f65a7164d7c" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="54b2eecd995c2a9506e1d2c1c376db36ddc85e268d9fe9a83842b5c460cbe9bc" name="libbpf" arch="src">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="89447f0f3f6360cb4cb9dd3386221b842cde7b45b7026ec2cf038f3b9f46c676" name="libbpf-devel" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="9981dc597cfdd1ba9f71b966df8461fe0b93a1d45dd0fe089fcdbe84fa6d0aaa" name="libbpf-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="133aac0ab0603ab6ad0408a2e8068e5858a38575ab3faac5962cdec99c27ba76" name="libbpf-devel" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="a43cafea81031c8b8703b9ab9f4529d8adddbcb0c1bbfbb9136419ba68335f45" name="libbpf-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="ebc9b44c9bb39d797d4237976b7e0dac642e44541a8f0ada6597a42cfcaaba91" name="libbpf-devel-static" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="4e6e9a636be26605051378d247da052c5290fb9aba36a72c1f7ad6209e6b740f" name="libbpf-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="6c266a66ad0d168048832036e4f17cb004d9c5914addb23bd78a2672970ef842" name="libbpf-devel-static" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="e111c703ac7fac35174b6cca0a110df7649017fc24a4841ef05b7eb6c4d17ebc" name="libbpf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="6909f16018e0b3599a520d1e5ce056bbe8fca6de508b310cd5e0cd9c0c6edd28" name="libbpf1" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="20a7e8ef72ba1116c524d9e3b892a641af2cdc6a444da41d14e1c780bb4b603e" name="libbpf1" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="47530f89526ae82257d1a397917a2955055167e6f0457d0467a825ced742ac50" name="libbpf1" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="e88a313b4fe6c7d7b4fd55a636e6f77baaf6e3e43c4ac6f58942b8ed1a516ffa" name="libbpf1" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="9acff6c2bc7c53dcc4213e741a0784a566f849aa85787b273446e4bf1c874781" name="libbpf1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150600.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="dmueller@suse.com" date="1683028800">- update to 1.2.0:
  * completely overhauled "Libbpf overview" landing documentation
    page;
  * support for BPF link-based `struct_ops` programs:
  * `SEC(".struct_ops.link")` annotations;
  * `bpf_map__attach_struct_ops()` attach API;
  * `bpf_link__update_map()` link update API;
  * support sleepable `SEC("struct_ops.s")` programs
  * improved thread-safety of libbpf print callbacks and
    `libbpf_set_print()`
  * improve handling and reporting of missing BPF kfuncs
  * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
  * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
    features;
  * `perf_buffer__new()` allows customizing notification/sampling
    period now;
  * BPF verifier logging improvements:
  * pass-through BPF verifier log level and flags to kernel as
    is
  * support `log_true_size` for getting required log buffer size
    to fit BPF verifier log completely;
  * allow precise control over kprobe/uprobe attach mode: legacy,
    perf-based, link-based.
  * fix legacy kprobe events names sanitization;
  * fix clobbering errno in some cases;
  * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
  * fix BPF-side USDT support code on s390x architecture;
  * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
  * fix kernel version setting for Debian kernels;
  * fix netlink protocol handling in some cases;
  * improve robustness of attaching to legacy kprobes and
    uprobes;
  * fix double-free during static linking empty ELF sections;
  * a bunch of other small fixes here and there.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1689336000">- update to v1.2.2:
  * fix a regression in perf tool caused by libbpf resetting its custom
    catch-all SEC() handler on explicit bpf_program__set_type() call
  * fix possible double-free in USDT-related libbpf code, which happens when
    libbpf runs out of space in __bpf_usdt_specs map due to having too many
    unique USDT specs</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="c2ce4eccf53a8ff83824a4acc7050a29ec5deef6b863e9a5b2a07d9d38ca8f23" name="libfdisk-devel" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="66a41b60aaad5663965a61ddbc4cbe0f97bb85e6820bb6fe7058dc0ab6c23d81" name="libfdisk-devel" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="459d75fea26ec3f1ea4806cc03d14048707c3a011959887a7f10b881317fa511" name="libfdisk-devel" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="70788ff20329b129b4c646012b04f17f188c0a21a3d1b148a4d9b6ec9d93026a" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="e2ebd3bfece5c5c59cf2224371738e9f8201aa6191071bb853ff359aa51519f0" name="libfdisk-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="51668ef31e502a8f693e3c9213e2c39fd49be991a0f2166351a5aa3bb7f00f3f" name="libfdisk-devel-static" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="6d2f66c86494dec83f83e152894ef7f0c594c55e50b9ab8f386ce80504d0f46e" name="libfdisk-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="4b3d350eda7056f91e63c0f383a21a188ddf16a9f9b47cfb9efec1e7a86dd3b8" name="libfdisk-devel-static" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7b6a46909dd4f0f2e733264fb417dc3b6879fa8d574b50707063094cc8658c76" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="06644b3b5f603e8c30245ed945c571c7ca18e9b5df4d3badfcb024f2ed04947b" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="89c27a22747ebf8fd3450abbd3141d1fe24222238d6c3543cb576df035d0fae2" name="libfdisk1" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="858cab52a46f20e06e00ca6f4ab37fcd0edfd053adc60c75ec4b449a4fdcde47" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="49ac885830dbcdf0e1a17ee809a84cb7a132c44be943e580bc9ebe2c8bf9b9e7" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="898f476387bcc775b747a32a9819bd9e984bb8cc9d892e22c8b4f0afb415b545" name="libfdisk1-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="cb7dfd0757707cae49c1fef0c9ff580cf838a79e883994c08e2649a5767d6015" name="libfrr0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="af7b1f2ec065976ed98ef2eaabf950c7a42a0bf107d7ea708a4113d6527761d8" name="libfrr0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="651b9feb176eb3db9ef1ce6aa83afa0da14bc5b21c37b45dc746bf350195b4a9" name="libfrr0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="86efbee8e2297f3b48db9e27920bf8d346ebdab25c22fc05af7674ee3547fac1" name="libfrr0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e9ebc83c704b66b200c08ebe2182013e69578d973387c0416bb668ba1a54acf6" name="libfrr_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="988dce0a310b1963f904489f2dd812623d871a23c518a72f3bc9598325d9d325" name="libfrr_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="41adc9f84549fb9ac5774b0390f8c22e6160c4e5f660abe80c51170715b24cb2" name="libfrr_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="ee380c6b57f68300ebfc6cc51451cbf57e5d57455063c2849b22b3e586967760" name="libfrr_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="a5ab012ae8e2ac13bfe4a39d8ec83a3b1b5afb38297a46195ffe71b8c41b1841" name="libfrrcares0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="da65b3c51b83795dd72dc5b7e4084c8352e7d2d4580636e6d81faea570744235" name="libfrrcares0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="5ff2456eed06901d17d75cbf5dc5af270895bd782422734f106eb0073287bce2" name="libfrrcares0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="12ca6eda8c8ce582bb75aa8c85105b6f473c2263707fa841daee9448ef9512fd" name="libfrrcares0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="1463ca0b2109429fdfa4c95715ee731c265d68be0dd2fe13bf08ca2790228dbf" name="libfrrfpm_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="301bf6fe460be2104a02f8692d7cb95daac40115cb32d5035cf5f36731655c8e" name="libfrrfpm_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="6a88c5ad6a3ee07f28bf67af42c169bc5c0316f0862863dfcdc2234b26b0bd11" name="libfrrfpm_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="a3db7836a5fe3a5d0b5f63e0d516de7edc5f70aeac21f125d6f3a1567f8702d6" name="libfrrfpm_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="453fac5e63f0a2cf556505c2ca46a75382586516333d68c792934a662e147f24" name="libfrrospfapiclient0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="b62616ce9d2e85be27abe2ecaee0efa2d2e2414f9aaf72b47122815c30fa478c" name="libfrrospfapiclient0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="86a905eee544d020ea13072832583bd584fd60360b1fad70ff830f34bcdc0ec1" name="libfrrospfapiclient0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="ac1e3d659a3b6d13cc53ec60b46752a54c136c6279fa9d7200b75453d24a8748" name="libfrrospfapiclient0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="28f5317cec1c6b34b48f7a861cd27d86726bfb5f4724016c3e9a879df7b2b0fc" name="libfrrsnmp0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="5a6c812cd91bbddbbdb7b1c28546056cad04981e81b299edb6f74a4902ec0b53" name="libfrrsnmp0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="8769da6ae07d0eaa3eaf3cce9041a2f608c426452e28cd58d4a0bc713626db53" name="libfrrsnmp0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="d0adcb6dbe508833556a3d9c8f291c2ceb56f65a03dcdc82ba6f2b978f31ef40" name="libfrrsnmp0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="e536f3b5c8dab3766daf1be9db05d8acbbcb7bc8c9ef21d67f52ff70d3a1e42b" name="libfrrzmq0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="6c454d523e589db3d2344d32f5802174c7d5e3cd70599f1dfd2aed5ad52e301e" name="libfrrzmq0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="8f410a2050918c039d924b5fd85c878d700687edb97733a8de8dfc5cdffee090" name="libfrrzmq0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="ae4cb5d04a808922bf992b83fa621bcd55304067840a0e08fd76ea80c363e53e" name="libfrrzmq0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="6cc9a5d3867417bbaff52634711dccf5a757da53e5017cde6947b8a8210ab158" name="libfwup1" arch="aarch64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="457c67dd411afe34f6c607c7a56d067fd4f9d943b6f00c2872171b86b838e1d3" name="libfwup1" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="5a70e59e77de734d5b286c6e7152af3f476d1615d23ca5c040e7d7e0567f96c8" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="763eab862c4031ad6c34e93a6960ff3926d2628d980675f83b4f01b876f4a286" name="libgio-2_0-0" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="d2e26bab09ad1fe4360e57bfa07f363665374c47317f82f9d213637e3528848f" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="892f6951208812bb29c8ac65f6fc31655a6a280c54969bd54bcdc1c76dc7dd49" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="62f4fdeaf3b848e68edd53811cb454777f38c925bec09a5b93ec0d5406c12995" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="cc43840f7b20f16fddb2fe5a72db00ddfbf638ad8a91921a48e5be23f9d310ac" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="7a9d429ffe0066ee1b04fe8d1e3ca021503a2465e940dea1d0f8059e106df1a2" name="libglib-2_0-0" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="e93b10d4734e16dee32e4a0ba653d95ac78fc9384dc5902e954758eca7d4e33a" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="322d2fa5aa21e92c19b33b82dd799afc37e312fc53c4e8da51376ebe822b92b9" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="510359250e84a39207bf44930fd80354c81d31bed3b9bd1010feb00de9f836da" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="5a6f036a8cc64bdbca23a4f033f62f549b24c6d8fc7b85c7f1b947f3ebb6e4c9" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="501005e6e9456c205682046625b318d18a7809cc6f66815efdfe32c5c0bb7c25" name="libgmodule-2_0-0" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="b2e2699c00e22a975273ab2d4bd7f57f08975c6f375952de5f1fa2e03c5b3c9d" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="af86e53c6edc62adfe8e97cfb5a92f39ec60b638a3fc4f81a0e8cf25fd273769" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="9bda5428e2c191ccdbf1508357c63310a35c533e671ac6f618b036682b5eb5f8" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="728dddd6f1680117bc260f651d0791f389300072f6b1a17b992013c26e0965a8" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="c2b6a9721af0bc36036dc7d9bf00a31e46cae759fa6eaaf5979c26a1f756cf20" name="libgobject-2_0-0" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="bf1e893d7888c972c9aa4f7ce8c0a1c67a6d647aa0036b6e5835d30dd3913a3e" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="25cd24a2fa7df9c0e23087651d2917c996e8779f9df1a66ccea65b97b408914f" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="d652b4a5e39e0fa551aee7ebbb00afc2eddb2557da784225cc30ad541f2ccf5f" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="9fb4d12a9bb59f12e080a08652f50a0232919102ea05d46799372f592f12709f" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1dca8e0b99e28ea125207383a05563a9c34c69c137818fd7d5a157f8d7b3b2d3" name="libgstallocators-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="b461cbc95e1129d6cf32b535a1f89c6e29b9632a58b71f7d1731643e92e185db" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d10984f5e4b23c5d40564466c463ae3e621ec5047026c6289df4d8fb5140a219" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1cf9825371823ef8d96eb8a9576c3ce3215140d700db1e07861e32d8be3b0298" name="libgstallocators-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="53ff50fa8bc56f242698884746d7a9e9a1db3f845eecf19fc3080d38c7a19d86" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bc01f253a33237087b23067d9dea8ee3065eb714069da1de672fac7b81c1f9e2" name="libgstapp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="43fb68a0ded24e1e5f0dcfb89ccf850a6a68ea3eaf565b1b89a4cf8d6532d3bd" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a09453bd172e73869b011ca39eca2935d30d785a9dc897c1cd1a4e7d169500ef" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="6c85723c5ca60a3c13ff06d7063163786fe90b939205c6b9dc11ccebf8e4fcbb" name="libgstapp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2eab91a38931389f05743a843950b50f260506344fb41c62a7bd150b11f63a8f" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8a1f693e54ba42ecea66300ace25f60af8ee4b8e6caff48f30ec78fe87d41717" name="libgstaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="3093cee55d4430a50bdc37608b63d716d1dd2ba677b7370e579fe6fadaa1b03f" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2e25c9a15023f995eb9301bba771b457248871742d6a20cb9cb3406de57b5f4e" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="3b8aa77450e6f23c06e5a00633ee971db5055bf8a3d8313dc1a676ad23e8d1ed" name="libgstaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a0eb60b566d95221b3aaa060e9b29922024dee7188b4d11d49b45cf08bf578b9" name="libgstfft-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="6995e88de51e3defa4a03ddd5e5fa0d17c9edfc38e80df3afc6b219fb52a615f" name="libgstfft-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="21f4438213753a0a3a3f111645a939ceca0ccfb87aeb90a4f8e6403b176bf323" name="libgstfft-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2ba524cda8726ed3ffaf10b497acd6dec86062a9a65bb4d3a66f48064b7d260c" name="libgstfft-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="84c2773b9113694fdd13934e78f125f96a4411af9f2d965eb4ce6969a797d468" name="libgstfft-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="3c2e413239844dfcf275308035e21c57a2e888146fbfe491ce09aef7c99da86d" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8015fc75ac126956bd07373dee2b771b5fca1994f6d0ef8d5ea6d7e530dcf4c3" name="libgstgl-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="db25b870964399f1c4677ca2681192597b6a2dd67d790ae8d74e299f8e023e60" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="7251d71c4e82c16449ae4b2f96584119ef85a1f8df780f1d185b42eef3bddaee" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="066f10515401456e65c38026afe2a8a0b790f3e2e658c5a2661c365660b83e0a" name="libgstgl-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="631d3f418db8c957f4a100a6c99275228fbe2f66079a6f3b65f0e2c72a69bafa" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="5c993a06c05ffcbc99c4d19607765c60ccca776a63d9e9129f5396a081fbfb05" name="libgstpbutils-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8986ef5bb9d62d2c49d1c3fc9c21cc5589cb12466a3244c18fc0bf4079d4cf0e" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="cf941aa2321983ddf2c05ff62d06d896940a8e62a00fedb946313cfc3462ee34" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="ac97bb590fd7fcc5dee68931da7c5110e64b1f6696c2499f16c834b34d45c665" name="libgstpbutils-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c18671ea72f5c1f052b0f380c3e27aabd276f5e675d507fb45500199d79a4b57" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d2c582cbf0e1b8afab13c8fc490cc736dc5c96a820af71c2e795943e05487fc5" name="libgstriff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bdd52f648f8ed7d31b908807c41781c74ecbc724a4eedace9140d40d0cbb1e02" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d1d7387f396774580ba98bca17e4b3775bbe731eba9ddd764811e427bbda1cfe" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bebd9a0284a7f2bf8642f5c28599e3fbe15aa7b6cdde9908525a57357cf04f99" name="libgstriff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="4574a1a0ac77716bce28ef1024c774441273a49e64c74725411116ef756c3976" name="libgstrtp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e6fc206b68edc64bb2f931222ae56a9dd3884c5f8647a89fff3b903250280bec" name="libgstrtp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8cd5b05f451227e2f79c8deb3552fabcb1ceec12000d358c43eea3a1548450e8" name="libgstrtp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="4514ca28867ce4eff8a769316a5e1aa60dde77524cb85be3dcf295f6bc15110d" name="libgstrtp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="58e752cb62c5130ffc8c5cd82aefabb9f5519936e6d53ce1ef445ee42d08f79d" name="libgstrtp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="89395f3e244103e36a0529f244a660873ee8a50fc9e3c9f0c717e4682cdb0b85" name="libgstrtsp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="eef25a9d2d19ef0b146ca417e0b4fb906422099c740effd9ca8149556db9ea0f" name="libgstrtsp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="5871e9ff28d8f09002e53197b670e7757b6b471eedcdbbada983bd073d5dbb39" name="libgstrtsp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d8317dbabf0976a7e604e2c7acd1ee6779f71cf72865071efdc39257e02d5c82" name="libgstrtsp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="79563dfe737abd6c5af2b576b666672deb1c70f3bc561e502c2e125affc83929" name="libgstrtsp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2801a41d53e9e1b36a456faaebd28dde169d9b5eb4ca0fc729fb7716025c6ecf" name="libgstsdp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="327429dc4afbca8c5ba97b93c3ef0ac7900939b5a0ea97722a08a34efb7d1dac" name="libgstsdp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="5801d7bdd22d0a8ab171e888a1ff220c2ebe117be8b03b7acd837f6553b800a9" name="libgstsdp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="928e4547bd2b3a29f21ae63bad6ae690b324286bd1e499c4671fecb2c0fd906b" name="libgstsdp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e5f22031c5a4a355611df53130a875973e0051bb4c3c0405e0996800a8f41823" name="libgstsdp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="f29b5604340c12764721a4270204b9ebc81e45cc8c57010eb9bc6b3735f42c50" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="998f7a5603b755457c5dd7e6bbd535d0994c08af1089ea92abd6069bc6c71f18" name="libgsttag-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="3b94126566ead13cd4f1c6b4e595a5f7b49373ab5989c22178642be3867bc8bd" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="6cd5fd3b7e87f1ce9696beaa8b33e4a9656759666bd8314c3c004bd42dd6ddf6" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="5aafa2790c24f1aec9f2e8782e1b41a90d3715d8a3bf58bbbca5ecf999131dc9" name="libgsttag-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="28caf8a6631a6c9170293cc8c9c6afb33dadf622eb0a0d6188f8089d2bdabc7a" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e570644fa8959c88e682d8453bddb15c1f2142b22cdc9b3640667e7c9f283eb9" name="libgstvideo-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="4e289b30f343260f2efd8055135afd105779328d9ced573b6e0fc949df7087f8" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bb07a6143a380c6ee724fefbd7bb0264277464a0e3e411c12ebed4dcc562c0cd" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c1f473f5df1736e217b849d163904506dc6e2809c2717accbefa2ed15cf96325" name="libgstvideo-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0885f96ffbd84d51e789a1df136fcb0612375e16157054fd7c2cb904803c3643" name="libgthread-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="e13715036c4c1bcd7f011eaa5acdb6378e74149bd944cc8b6f81c3d39c566537" name="libgthread-2_0-0" arch="ppc64le">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="f8aeb0b863b7e9c36f4458694a1dfd2a52d56f971474a8b283b87c553e636f8e" name="libgthread-2_0-0" arch="s390x">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="d095657f26d1e6cf49955289cb890a87b46434c96a5987d4d1dc54176385dc0f" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="4eba79c80f9b3550831e5c1392f461fcdfabf9297a10787507ba725b7b53c704" name="libgthread-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.3.1"/>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- Add mate-mimeapps.list for MATE-specific MIME associations
  generated by suse-update-mime-defaults</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 2.76.2:
  + Fixed various build failures in less common setups
  + Fix launching files in Windows via GtkFileLauncher
  + Bugs fixed:
  - GMarkupParser documentation completion
  - Disagreement between runtime and docs on whether interfaces
    are "classed"
  - gdbus-example-proxy-subclass.c is not complete
  - GAppInfoMonitor documentation deficiencies
  - Check for __kernel_long_t when enabling futex()
  - Documentation mentions non-existing function `g_value_free`
  - Not clear that GPollableInputStream methods are undefined if
    can_poll() returns FALSE
  - Missing docs for GOption (commandline parser)
  - GDebugControllerDBus wrong default in documentation
  - Probably wrong information regarding G_PLATFORM_WIN32 in
    README.win32.md
  - Multiple Definition Error When Generating
    gio/tests/test5.gresource
  - user docs: GLib.DateTime.format: broken highlighting
  - GtkFileLauncher: generated paths not recognized on Win32
  - Build failed due to NULL pointer redefinition in C++
  - Build randomly fails with: 'gmodule/gmodule-visibility.h'
    file not found
  - unicode: add tests for g_utf8_normalize() and empty strings
  - build: Drop old .gitignore files from test directories
  - tools: Drop check-abis.sh script
  - docs: Drop section about default branch renaming from
    README.md
  - tests: Update Unicode normalisation tests from Unicode 15
  - Make clang++ happier when using G_STATIC_ASSERT
  - gwin32: Avoid use of function call with side effect in
    g_return_* macro
  - gsignal: Clarify documentation for GSignalMatchType matching
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684843200">- Update to version 2.76.3:
  + Bugs fixed: glgo#GNOME/GLib#1264, glgo#GNOME/GLib!3402,
    glgo#GNOME/GLib!3403, glgo#GNOME/GLib!3427,
    glgo#GNOME/GLib!3428, glgo#GNOME/GLib!3434.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688644800">- Update to version 2.76.4:
  + Fix build failure on Android with `statx()` support
  + Bugs fixed:
  - glib-compile-schemas failed on directory name with no Latin
    symbols
  - Build failure due to statx fields with NDK r25.c
  - glib-compile-resources: Fix non-ASCII arg parsing on Windows
  - glib: reset errno to 0 when futex() returns EAGAIN
  - Avoid stack overflow in gspawn on macOS
  - glocalfileinfo: Fix incorrect use of struct
    statx.st_mtimensec on Android
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.76.5:
  + Bugs fixed:
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - Backport !3529 “gmenuexporter: synchronization in
    org_gtk_Menus_get_interface.” to glib-2-76.
  - Backport !3547 “glib/gfileutils.c: use 64 bits for value in
    get_tmp_file()” to glib-2-76.
  - Backport !3554 “gresourcefile: Fix crash if called with a
    badly escaped URI” to glib-2-76.
  - Backport !3555 “gkeyfile: Fix overwriting of GError” to
    glib-2-76.
  - Backport !3539 “gdbusmessage: Validate required headers have
    the right type” to glib-2-76.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828804">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828805">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
</package>
<package pkgid="eb218e8b843f1b7667f882ff303d1ae45b9a95543e071904cb7970a8645f8e32" name="libgtk-4-1" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="48d0f5dac992d5a818826f8d8a91aa176d76bc0f59d85ef02e33c771ee0ce156" name="libgtk-4-1" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="63ddb27d5df2ae4296dbb8f482b026cfb5775ac15767fbea9f10137dfd9eb7c0" name="libgtk-4-1" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="f1b1627e9be5c3099597b8f6bd718cdd38396f9ef40bb60ead45949cb9e90405" name="libgtk-4-1" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="2ccb0780269b500b58000859317845e5fb53e10e1286619f2f158c2fae3840d9" name="libhandle1" arch="aarch64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="c3aa5af3d268a7e7bc445054ede3551b87a458477c7b4bbd8e4ac19a72508098" name="libhandle1" arch="ppc64le">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="29f758da9e163f341e20baf82f3e566d02bcf13ffd9491cae83736b87e62d669" name="libhandle1" arch="s390x">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="25bab3c2c56d801a61216c84c35c12e3a844a602d4dc6320e9d5e1d041658362" name="libhandle1" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="e66d9d1af5f25a9be7f707549fe4d7ca87d17309c6f0493238ffee25e356fbcf" name="libipa_hbac-devel" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="60cce6828551721aef1245f7708ae3b978906b57e9ef5c50757d6c00efc5208b" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4e541dcecc39ddbee73f1bf9c8256509a9114831d3f3a5920a8190fe833bf23d" name="libipa_hbac-devel" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b50ded856b7187fdb257fe8dc96fc6f99b1069159aab550271fef28f715239d3" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="6f3558384f6e57a7c9531a202f18af1d5c13ff927b7118ddf08dd48684919de1" name="libipa_hbac0" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="72491fa74f6fdcaada1dfdab78e6f67f3faebc36463aa0d163ce878407af5498" name="libipa_hbac0" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="af1a42dc24895c7b8e9e25aa1f76ffad9fcf5f87d3ae7d4487eaad914d1b76a9" name="libipa_hbac0" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ce01c16f97817e04cb84bca9a1618a569668b48a307ac74acb4fc93d8450aa16" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="6e9e65eb7a9357c8c67b813913aff64578952bd3ff8170c0053d84c126b42565" name="libjavascriptcoregtk-4_0-18" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="cf78557e9e69d5d7d2f18debf27421f967d7b3f8915404bfb8f4f0c20357a129" name="libjavascriptcoregtk-4_0-18" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="dab34f862f3be963394dbc83502e7dce3ea5f9d54dbad7a53755c4214bb23b92" name="libjavascriptcoregtk-4_0-18" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="307cfda74959deb3770fb5efce05ad607db3bab3ba6a3ecdf23d2750fe8de43c" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="60c6dc20b7cc7ec28892e4d277cc2dd66f9a66e5a49f43f453175ab4610ad708" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="46468c3636e4591a19153292fea425d6179cc294d7db7dac9e44d2de0ed746c3" name="libjavascriptcoregtk-4_1-0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="2f1acca81a02f075858ec33245c4e978c113ad1328482ffbf63c042b80957543" name="libjavascriptcoregtk-4_1-0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="d5b83c515d002de5db2e14611d2f8e3143e239bdc09258d512bbec0735b6773e" name="libjavascriptcoregtk-4_1-0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="cdbdbe8201b8b33b89364de1f1795eb1ab8efc69c895e27ffd1583d7d9416a92" name="libjavascriptcoregtk-4_1-0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="e7b67b1e8b9def26298bcda41da0986f1d01063f330d123fc6c906f8ad8a1f9c" name="libjavascriptcoregtk-4_1-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="350ee392a8247d4a6e204f71f631ef0b790e0c9919dc8e9f981ebde0ea18e82a" name="libjavascriptcoregtk-6_0-1" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="69396b9794d8c074d2960aaeb547900470e6d8210d0658067548a8feb86a6100" name="libjavascriptcoregtk-6_0-1" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="7843978f04918a16602d944a34935cc4a14995ffb247f1816fede249892fb05e" name="libjavascriptcoregtk-6_0-1" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="0da9761597f73d433adf0c338be04fec86f5ca305e2e031aa5c9013308881862" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="62636ce6030a5f61d5a36efaef167f0ed86f3b05d43e6a2c03d7d7cb8ff2f9a1" name="libmariadbd104-devel" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="84cb0596244a399e07af6ac6ffcf2451017a63687d8f2ebbf2667e1a1ffc9a81" name="libmariadbd104-devel" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="347bee21b794b392d338da01792ffe34ee124c96c3ac03fbbe7fa3dce67eb35d" name="libmariadbd104-devel" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="d8ed9d1574f1b80cda4ec22a9358ef0fb3c09f2d41b1a9b3dcbfff3f2253872d" name="libmariadbd104-devel" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="2742d90215e5af423fab6e746981546b69eb9b8b5024eac8739147d3b345e4e3" name="libmlag_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="859d8e5978056836770ae9a9a3ff1f873537f84a3632e94f462800aff818f2ad" name="libmlag_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="2fb658c8b0739caa7ac258c3640ee6a1357344ed6f3631b187ef20df29c1fed4" name="libmlag_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="4d5f38538b24fa8535e9b7667936ea0e2ecd8189135c6bb324d05c0c2c186c56" name="libmlag_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.23.1"/>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- Apply upstream fix on error handling when receiving BGP Prefix
  SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
  [+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch]</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
</package>
<package pkgid="c273248cd8122894a83a9bf29b28eee4b461dd59db9481ab5d411ec4a0fcbaa3" name="libmount-devel" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="3d464680f999a2b7eb7a1dac4203c0325369259fe5695283f3c2bf56107253bc" name="libmount-devel" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="9f67a9ed37423b16d7af088d1031cf6c58a5e7f2b847f368c25482d62bb65ef1" name="libmount-devel" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="9b067145cff0f81e824c02c531f59457a57eb1e2609002337da842d18589a5f9" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="2b59ca45ee994e1dd9466d85cd8434f513b8aa5a1503913f30bbcf7aac758842" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="83e8e078eb7e681d8a4532235a692fa637b9082e550388c4d7fd6cae3bd46ce6" name="libmount-devel-static" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="4fc7b9f481e5ed14dfdfc4d057acc1ea61aeb6ead2de06ff81c43825cdf423dd" name="libmount-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="f82741e595abe7d48847550968a4accbc01b5ef24605ec656fbe23f6811f3822" name="libmount-devel-static" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="df630d881323ec479218f9241c3ba6eb8ff3fce02fbd73f61b857a258c74c537" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="994d40cd500b84ba1605bf7d781b353ecbb22f92aee4fc44f2f8b1fea8cbc9d3" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="9aa8b02e38135501734d2519c278688c3a419200cb103697fba630ca28067c12" name="libmount1" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b78ca92cffa9fe471b7ce810a9b2d3143ca1809f9f84e3530d014321762c0093" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="bfd3c2581d6307a30cfab622b3d08ff07878aac357b4d2eacb70a5a755951519" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="e9c87c579b9b50eba5eec952872ed87b04f05fb108c5d75937796f529493fe6f" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="8a62deae0282932c81e145a3f0b4fb9f5d7065e239096ddc4910f6d379e48550" name="libnfsidmap-sss" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8897751cda0694774a6a22d9d1ed57a0e0215264bf39c314161cb811a0f00261" name="libnfsidmap-sss" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="f05fb5c708499ab21292b4c4fb80c8fac1bd7b8f4e6d9a48a02801c31192ab83" name="libnfsidmap-sss" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="03334e3926c7e085bf01ebe54ee62395fe7abacee0d3b00dbf8f4537b8ff08c8" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="0c12f199482cde907d9586c6af356b700d32f90abe77b63d73ed2c7d6e2a1b3a" name="libnsl1" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4fa5d2c8fabb888c512094d63982f58f1d45f4729b62af87b575a5da2829b3e6" name="libnsl1" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="d4efa5879978e8fbd21112de4c2ac92e8c5b5ddb23d58a8e451255b9c0f0cac9" name="libnsl1" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e0d6673e30af491fcaad86151503d529e757fba177684618abf51cf575eba6bd" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="bc32ca405b7e962e5fbff7c685205312bc1801908a21fd62aa749050462233a0" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="673e41249a9ebf0b57084ea6cd532d3f34ab4fb5da963abc425c1051b156f77a" name="libpostproc-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f3db3f61aaee3825e54fcf76995bba9b84d18077e09dd12a29742bd474cb2740" name="libpostproc-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c768607202ace5230e0fb28202f82c6d50ace9ed0ca90dd66af221db1dd28652" name="libpostproc-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="0612a5cf236cf8f3e65fc6d5bad824d408cf32dbab70d5a45eaa44a45016348f" name="libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="629d1c6fe085b60f0b102461db04a36ce9c698ebe14619387b6462eafaeced12" name="libpostproc-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="3299ec50f1bedf73607d3b31860ee1db6dbda1af2e9d6a2969bf34639b019b9e" name="libpostproc-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8608f3a2c127c1cdd7a3de8222244385d012779150e3ceed575260bf6a682703" name="libpostproc-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="cf4231ab7fe28c6e553c9d06fe9e868e6ece367317716b5041050da24b21ac3d" name="libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="2b27edfdc15da5261f69448993d39ccf0ed29cdf8d1620357ebcc89814903d1d" name="libpostproc54" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="d2522989828a15f87ec68b6fb2f2feea388675435eb75c25879fa4aafefa7c95" name="libpostproc54" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="3f2dd1f74412ddef804881c0fadb47645dc68df94796c2db3daa720cda5817e6" name="libpostproc54" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="56120579c724bdc07d4a222889e23d0c9dcc0a689ff34bc21b4714f681170893" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="fe376373e7e344bb29c42332c8f93a8fdebda3d233fecd53c8ef1b5c07b4b5a7" name="libpostproc54" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="30c5e6ba11ddf90a461ca754c3007baaac6a787648699bd95dfdc068b8820671" name="libpostproc54" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c08102b1df0b1be2e5c6c107ca6e53658c4c9b13a2d939e662faeb3f526fc885" name="libpostproc54" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d6401787f8205379ca173f880530c68edac62afee95967f62fff103c8fc3b0bb" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d81bfc68635a41370d8c7dc2b1f3f418b56d1486b9ec51ee315e83a2875051cb" name="libpostproc54-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="b92327ab3cfc7df663b30479a5f84f994df9c2eb0ed00d9ce03a60a8bc508c85" name="libpostproc54-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="8ea5d4b39c033a2c2627c1603f30530d085c6fbf1a7c22be336facd63aa1f7a5" name="libpostproc55_9-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b75f650b56f8a3efb58acbb8c23c1504a2ef6da4aff3fba82d1c4e9a1bf35264" name="libpostproc55_9" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0beb1a1a19141649585595b0fb4a5903918f132f8d6fd0dd992c71d80479aa26" name="libpostproc55_9" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="2aeaf541fd70b5938fbf7379a14b51ffca1b1bd118cfdc524316d8c75d44f8c1" name="libpostproc55_9" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7031dccc2ae56227bc2c2a3161d9b73ce197cbcd408328d5d846acf79faed44f" name="libpostproc55_9" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="ea5de9150bccab2057751ca6498e8e1910b119b14c733f1bc681f26ca788fac7" name="libpulp" arch="src">
  <version epoch="0" ver="0.3.3" rel="150400.3.26.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
  <changelog author="gbelinassi@suse.de" date="1698062400">- Update package with libpulp-0.3.1:
  * Add timestamp information on `ulp patches`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714737600">- Disabled ptrace_scope when building the package (bsc#1221763).
- Update package with libpulp-0.3.3:
  * Fixed a race condition when process list is empty.
  * Removed "Unable to get section data" error message (bsc#1223306).
  * Bumped asunsafe_conversion attempts from 100 to 2000.
  * Fixed banner test on clang-18.
  * Check if ptrace_scope is enabled when attempting a ptrace operation (bsc#1221763).</changelog>
</package>
<package pkgid="bb567b87fd4c6312a17e0285346f55d10ba5b01d177205e515c76f7c8789fcfa" name="libpulp-tools" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="150400.3.26.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
  <changelog author="gbelinassi@suse.de" date="1698062400">- Update package with libpulp-0.3.1:
  * Add timestamp information on `ulp patches`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714737600">- Disabled ptrace_scope when building the package (bsc#1221763).
- Update package with libpulp-0.3.3:
  * Fixed a race condition when process list is empty.
  * Removed "Unable to get section data" error message (bsc#1223306).
  * Bumped asunsafe_conversion attempts from 100 to 2000.
  * Fixed banner test on clang-18.
  * Check if ptrace_scope is enabled when attempting a ptrace operation (bsc#1221763).</changelog>
</package>
<package pkgid="5643987253aac47d05534f693e819b37773b3d260710b34fd4b599a5466deba6" name="libpulp0" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="150400.3.26.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
  <changelog author="gbelinassi@suse.de" date="1698062400">- Update package with libpulp-0.3.1:
  * Add timestamp information on `ulp patches`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714737600">- Disabled ptrace_scope when building the package (bsc#1221763).
- Update package with libpulp-0.3.3:
  * Fixed a race condition when process list is empty.
  * Removed "Unable to get section data" error message (bsc#1223306).
  * Bumped asunsafe_conversion attempts from 100 to 2000.
  * Fixed banner test on clang-18.
  * Check if ptrace_scope is enabled when attempting a ptrace operation (bsc#1221763).</changelog>
</package>
<package pkgid="dfd9d9676beef5807d7af3c76475e4f979befefbc863747b09ec1b6b8eeb109b" name="libpython2_7-1_0" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="88ce134d711d5e28bc131d656dba3356fe8ed883794e1e50684ba0d15cfb8d38" name="libpython2_7-1_0" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="f067ebdc9b7a9f1e07f7b45703a95d7154eeca5bc3abf9fa9cc3acf0886f7d66" name="libpython2_7-1_0" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="1f814ddcfb2c47b966eacda314ef92291648c6d62df34b7cef3968d373251b02" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="5b2cb9e0814ab8ebc7c31b1478f5d36857458945017df8c14a5abcf223628375" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="698175e3ddb053b756f6dc5104ee748bff1c988fb96c7691a47c231ad307da97" name="libpython3_10-1_0" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="c1185476cbc380fbc559988eeb55f1182f330e28406e172713aeb0bea8959e6e" name="libpython3_10-1_0" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="50af3bb4b3a51e6bd88b231568fd12d03a72d875225e9efe25a96f25033115e7" name="libpython3_10-1_0" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="69c850c58b0cdca0e7c529433dfc687201f37249758451aefca1158085e83814" name="libpython3_10-1_0" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="fbfe2d9fc91e152e10de390a83f7fb6e5c9d14f2446817dc37bd7ca8c8bd0c05" name="libpython3_10-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="fde4abd78ca3c2a308170e44bb3303fb5bad16d581fa061d19d80c51e9fd6f3c" name="libserf-1-1" arch="aarch64">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="f8826afc0c525d2fb500e4cb28f612a439c5a26a1dedeedd39fe36b7fb3edabf" name="libserf-1-1" arch="ppc64le">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="ff78714d6cddade7485cb69213b37d4bb27957b32a9bd0cd36a0265cbb5da157" name="libserf-1-1" arch="s390x">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="585641e3490354d7004203c2a6818b78210bd39d2ed14ae51d51eded7f67cca7" name="libserf-1-1" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="1f857c03d442ea322fd55edeebb6c459219c2cae1a98986c402482145d57fab5" name="libserf" arch="src">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1370347200">- update to Serf 1.2.1
  * Fix issue 95: add gssapi switches to configure
  * Fix issue 97: skip mmap bucket if APR_HAS_MMAP is undefined
  * Fix issue 102: digest authentication failures
  * Improve error return values in SSPI authentication
  * Ensure serf-1.pc is constructed by serfmake
  * Optimize SPNego authentication processing
  * Reject certs that application does not like
  * Fix possible endless loop in serf_linebuf_fetch()
- replace libserf-1.2.0-configure.in-add-gssapi.patch (committed
  upstream) with libserf-1.2.1-configure.in-add-gssapi.patch
  (still changes required as patch was changed upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1374667200">- update Serf 1.3.0
- improvements:
  * Improved Basic and Digest authentication:
    + remember credentials on a per-server basis
    + properly manage authentication realms
    + continue functioning when a server sets KeepAlive: off
  * Improved 2617 compliance: always use strongest authentication
  * SSL connection performance improvements
- fixed issues:
  * use PATH rather than URI within an ssltunnel
  * improved error reporting from the underlying socket
  * Fixed bugs with proxy authentication and SSL tunneling through a proxy
  * Fixed bugs the response parser
- build system changes
  * Switch to the SCons build system
  * retire serfmake, serf.mak, autotools
- Huge expansion of the test suite
- packaging changes:
  * use scons
  * drop libserf-1.2.1-configure.in-add-gssapi.patch targeting old
    build scripts
  * add libserf-1.3.x-libdir.patch to fix hardcoded libdir
  * add libserf-1.3.x-soname.patch to add soname
  * add libserf-1.3.x-gssapi-libs.patch for libs in pkgconfig file</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1374840000">- update libserf-1.3.x-gssapi-libs.patch with upstream commit,
  mark as committed upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375012800">- update libserf-1.3.x-soname.patch to add SHLIBVERSION to make
  scons add a SONAME instead of a global linker flag. This is only
  effective with scons &gt;= 2.3
- fix running of regression/unit test suite:
  * add libserf-1.3.x-scons-check-exit.patch to return a non-zero
    exist status upon check failures
  * call scons check with CFLAGS</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375185600">- run tests for 12.2 and later only</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376136000">- update libserf-1.3.x-soname.patch to move shared library version
  link generation into scons</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376568000">- update to 1.3.1
- bug fixes:
  * endless loop if server doesn't accept Negotiate authentication.
  * ssl/tls renegotiation fails
  * error with ssl tunnel over proxy with KeepAlive off and
    Basic authentication.
  * Fixed bugs with authentication
  * build system changes ( already covered by patches below )
- packaging changes:
  * remove make and libtool build requirements
  * removed scons patches, committed upstream:
    libserf-1.3.x-gssapi-libs.patch
    libserf-1.3.x-libdir.patch
    libserf-1.3.x-scons-check-exit.patch
    libserf-1.3.x-soname.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1380283200">- adjust library package name, SONAME and SHLIBVER to match future
  releases and make maintenance easier
  serf-1.3.x-shlibver-soname.patch [bnc#842941]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1380888000">- update to 1.3.2
- bugs fixed:
  * HTTP headers should be treated case-insensitively
  * Compilation breaks with Codewarrior compiler
  * Fix crash during cleanup of SSL buckets in apr_terminate()
  * Fix host header when url contains a username or password
  * Handle authentication for responses to HEAD requests
  * Improve serf_get: add option to add request headers, allow url
    with query, allow HEAD requests
  * Improve RFC conformance: don't expect body for certain responses
  * Do not invoke progress callback when no data was received
  * And more test suite fixes and build warning cleanups
- SCons-related fixes:
  * Fix build when GSSAPI not in default include path
  - Use both MAJOR and MINOR version for the shared library name
  Fix the .pc file when installing serf in a non-default LIBDIR
- drop serf-1.3.x-shlibver-soname.patch, committed upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1386590400">- update to 1.3.3
  This is a small patch release containing a fix to solve a problem
  connecting to multi-homed servers (e.g. ipv4/ipv6) and some
  improvements in the use of error codes during ssl certificate
  validation and  handling of timed out connections.
  * Try more addresses of multihomed servers
  * Handle X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE correctly
  * Return APR_TIMEUP from poll() to enable detecting connection
    timeouts</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="29afac2d284f5f54d6d249af38eb3dbc004661a44305c54e499f760507c137ca" name="libserf-devel" arch="aarch64">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="52950886f2dc00be8691185e3f471155c9a73b2c64f560c94ef88fbe6be75755" name="libserf-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="726de04b841d8835e7f609d772c56d0e65c0a3b7cd5d50bf3d3489995c70c5fe" name="libserf-devel" arch="s390x">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="e711e54d36880092e7b2c7240e622ec9fdaf766a0c53c0870126f6bb43983637" name="libserf-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="150600.18.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1391947200">- Serf 1.3.4
  This release fixes a race condition during OpenSSL initialisation
  and two ssl tunnel setup failures
  * Endless loop during ssl tunnel setup with Negotiate authn
  * Can't setup ssl tunnel which sends Connection close header
  * race condition when initializing OpenSSL from multiple threads
  * Incorrect pkg-config file when GSSAPI isn't configured</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398600000">- Serf 1.3.5 [bnc#875382]
  This release fixes a crash during SSL tunnel setup, fixes
  Negotiate/Kerberos authentication in some specific scenario's and
  brings some other small changes.
  * Fix issue: no reverse lookup during Negotiate authentication for
    proxies.
  * Fix a crash caused by incorrect reuse of the ssltunnel CONNECT
    request
  * Cancel request if response parsing failed + authn callback set
  * Update the expired certificates in the test suite.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402315200">- Serf 1.3.6 [bnc#881902]
  This release fixes an instability introduced in serf 1.3.5
  * Revert r2319 from serf 1.3.5: this change was making serf call
    handle_response multiple times in case of an error response,
    leading to unexpected behavior.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1407758400">- Serf 1.3.7
  Serf may not provide the full value for fields contained in X.509
  certificates.  Allowing for clients to potentially improperly
  accept certificates.
  * Handle NUL bytes in fields of an X.509 certificate.
    [bnc#890510] [CVE-2014-3504]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413979200">- Serf 1.3.8
  This release fixes a problem with handling very large gzip-
  encoded HTTP responses and disables SSLv2 and SSLv3.
  * CRC calculation error for gzipped http reponses &gt; 4GB.
  * SSPI CredHandle not freed when APR pool is destroyed.
  * Disable SSLv2 and SSLv3 as both or broken [boo#901968]
- disable running tests due to memory leak in test fixture</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414065600">- enable running test suite:
  * add libserf-1.3.x-fix-comment-style.patch to fix compile error
  * add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash</changelog>
  <changelog author="astieger@suse.com" date="1472731200">- Apache Serf 1.3.9:
  * serf is now Apache Software Foundation project
  * fix various build issues
  * resolve a bucket (aka "memory") leak when a request bucket is
    destroyed before it is morphed into an aggregate bucket
  * reset state variables when resetting connection
  * fix types of passed, but unused batons
  * fix some usages of the openssl BIO api
  * improve handling of bad data in the response state line
  * support more overrides via SCons arguments
  * adapt to OpenSSL 1.1.x api
- drop upstream patches:
    libserf-1.3.x-fix-comment-style.patch
    libserf-1.3.x-fix-deflate-buckets-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1492776000">- do not check with time-dependent failures bsc#1035395 bsc#1031549</changelog>
  <changelog author="astieger@suse.com" date="1510142400">- Add libserf-python3.patch and libserf-python3-2.patch to fix
  building with python3</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711627200">- Fix build with openSSL 3 by removing usage of ERR_GET_FUNC, bsc#1221211
  * fix-openssl3.patch</changelog>
</package>
<package pkgid="f189d47cfab00d877b62c54d9ed18b279cb2d288b9035e82e97116418402cb79" name="libsgutils-devel" arch="aarch64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="6b3c64ab762341184b5f5378d8e9b6fb4264c5fadaba16f7a1875f4bedd7068e" name="libsgutils-devel" arch="ppc64le">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="0f88d5786ae1fec8707caf5a8c6ae5df8df3ff9860d40a4c1b6e9cdff64da789" name="libsgutils-devel" arch="s390x">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="cb2f98fc945d25d614339c103259c75c634908fb4ef6e30f6adaae00bddcb36d" name="libsgutils-devel" arch="x86_64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="fa5edda8cdadba1910a9d1bee3597da5259b0c9f5021e6d72cd0245b495df674" name="libsgutils2-1_48-2" arch="aarch64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="c7548ad4fb0c45a16fe20f3a1cc23645aec9469917c89fc8dd6cb28b39fd5302" name="libsgutils2-1_48-2" arch="ppc64le">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="edeaa61b2cce85d6ad588ef7b021e8a144eb0b978d8931fc6770eb28bdf395d2" name="libsgutils2-1_48-2" arch="s390x">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="fc01987c103deba82c90f938ce7db2707ceb1d9eca7f66698064ece67caa00a9" name="libsgutils2-1_48-2" arch="x86_64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="f40c49858ca94943dd35afce14366821704d1bdd752eb592d67b72518e440741" name="libsmartcols-devel" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="3a43aa3f0e703fe29fe8e91048428d13431b5a7a1d710411ea1c032a449b41d2" name="libsmartcols-devel" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="f7295972ef28c729ac476cf82d80fe9dc0ca4fc6b7c618875442c56e53c4fcf9" name="libsmartcols-devel" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7686837a666d1ee3150402712de2a4767f810225d9ca1be2ce9d6c509bb84185" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="529288032f31f9002f8f2f0798ef36b55c9a57411a756745d215ff180ff7d1d3" name="libsmartcols-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="adf3f9c08242602ae50eb85979feb4cc1bf0eeeb73a8c9142c1bbe94018abe97" name="libsmartcols-devel-static" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="978db3c59ae18f08bcac3fb38571fcc7c0eeeee12abfd56c54bc47a006ebc460" name="libsmartcols-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7428d7869f6a6d5d0d10a36a870e3d50f87499d6848c3a619087834942559742" name="libsmartcols-devel-static" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="2022a77829af3338413088051ffcfd9f0d4d7630e8b3c2956b215ceb6afb018f" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="3d044f002e8c501e85b5fe9a7d991902fced1d3410740e5311dd397e24e73606" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7de8d2d357086b4d4510883986e1a1e03430af237748993dc706894f0ca5ca63" name="libsmartcols1" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="061d4176eb7341cb13a22881e03434e03c6283e1604c2d06d4b75b2392240510" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b45d08ea409acd5fed2345809104009cbbd368d54a2dd99eaa05fda871a74dae" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b2898ef6fbe93166c9371a71188e18cb82cd71f7125a59b6239b9816a0689dcf" name="libsmartcols1-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7c22487c0f40b6df31aafdb78f21d2270ce35bd57b6b072707355ba0f00f71e2" name="libsss_certmap-devel" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="38c338d807d546a8c774efd9b9ae792d57831db5677882a0e72828241d8f18bd" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ff04c97f5f38ee2d8ef8ebafcaf3cd3498a6c0938cd2be1caa974835071424a3" name="libsss_certmap-devel" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ac684ad0e6bef16f9ce3e344cb627f5993b2eb8fa892484ba3934f9be19f07bb" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b26ee4eb9b611acf3b54c01acf8729e7a55734c893793766638a3d86d2da00cb" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="2e58be1d8690c21b523de12edd7ad69b856ee590c8edb46816ba7d481801ed09" name="libsss_certmap0" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="55c38ae3a4505a4333ba037e529d1f6420949f221a5ba55857bdeaa63203eed9" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="895afae6b1ab3cdb7f539d35c8c3f22c99481c9901fbb7fbac1d63d40ef9c991" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8889245fa9761038ef36bda3492899d3d0dadab313cad0b30e26c93b437b614f" name="libsss_idmap-devel" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ff142f8d96f7d95ac8f72141c7d196d964fd403ae4d1d7c5944443304f52dd2c" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b23f976285fa5ba3fd27179aaff1dc150e91fed9ff105aa5997805b4e8eacafc" name="libsss_idmap-devel" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b37812e80197b522f382e18e129acd4371218823f933901c1a93e182010add2d" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="723ab5ca2d2bf8c6a03baf1cbfc5a636ba7331099420422305e80f8565efdadb" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4a798000a29618b0a06c9cc58b58829185ba774dc54f873ac8c70f41d40a3243" name="libsss_idmap0" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="11d9c19a21d6fbee0639a85041f3f55330fb9ddaba0f48c01f83113e6c610612" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="a11e1cf22397c3e566d2227e0d62ca0b5388492c9a6f987519ecfb2fa584a798" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="275ab7ff6d975d8f9264e383df7510c45996544c87c6b59bfeb43350e3a39389" name="libsss_nss_idmap-devel" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="f68b3796e0de09414420ea8cc0dbf1e11cb5d0098017358cab766154e909d29e" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="a5a9586ec04e49dd35ebb7931abd3518d0254b4436a68ff593d560a8487f7bac" name="libsss_nss_idmap-devel" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8ed10d2b0b9963235b82b5013dd5a06647f68436b72c24ff6ffbdec84eadee5d" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="d29131429c9117ce9e3d3a9a58fe62bb87a167b3f911a03e9221e545a557c98c" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="6beebbe609dab2b5a8fb36dfa8d448c471a9c059fe14236178189c75ebb76462" name="libsss_nss_idmap0" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="3f22725b619752e8926ebb92172f43b89c653ece284fb088e77b121549ff015b" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="2728e925f7904914be734b1a705750a367742cdd48a344290f210af61af901c4" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="75225832be2cf58a2b7c1e8c98d12b2f8a06acfbd76faedb83b4e3814f63dd1a" name="libsss_simpleifp-devel" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="30b23aad959f4458efa047005ee6cf872c15b5883ef8661b8ec8d6d00a99b8d5" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8eb4124ac64d5d28a7c563bdb79ea728694026b7f7aedc9ef66e35903deed458" name="libsss_simpleifp-devel" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4114f0e04ea1adbd9f34ec80e3b0df9594d88e4e03e70923f1b0335473460848" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b595d1b547d3ebdadae5c5c9a3447a2a88e85b25b5f0290f20b32afa548b8056" name="libsss_simpleifp0" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="c83c6506cdc89ac8c3f6cd16b49de6a60b6f8907a23b09c72c0e3516bf3fc224" name="libsss_simpleifp0" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4f2b97241645d23b90affedd785df1c8e501c9db2398a060c8e39ef0d670c64d" name="libsss_simpleifp0" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="da446c3eb80fdf184aa4aebbb76837c08d0f1badd33c896c8c2a2061a70aaf1b" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="cc3d61fd74670c25af424ad4b5c9e30f96afcce4c9a27df639870c84dc44d380" name="libsvrcore0" arch="aarch64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="5e67cd44dd18be04b252a8dd04b9fbcfd3983fddbcfb365deced569d7de32a6f" name="libsvrcore0" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="74a200848cc50b8f7eb9dceaf7d5f670267ff3c5a6fb2375c61e5ee21c8335ef" name="libsvrcore0" arch="s390x">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="b8b58a1184a083bcafddee9a2840505c9f76a294db99dec57394a64336a86c96" name="libsvrcore0" arch="x86_64">
  <version epoch="0" ver="2.2.8~git65.347aae6" rel="150600.8.3.1"/>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
  <changelog author="william.brown@suse.com" date="1689940800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git21.c11e86f:
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap</changelog>
  <changelog author="william.brown@suse.com" date="1692100800">- bsc#1212726 - SSSD client performance improvements
- Update to version 2.2.8~git37.fdb3bae:
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.2.9
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'</changelog>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
</package>
<package pkgid="a95e2ae061cb0f25a8e6217a390f991207e354f84a6642278d8e6eb97a54002b" name="libswresample-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f60c4c31e7e13e6b6b9b35357ccae194724e01b20420b630bdbc0b82e318692b" name="libswresample-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="ae20b09427a726e2aaa6ff34b884117a7e4bf7c41527825855b1833615252034" name="libswresample-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="33ffa148656511e8f2cb9a4378814e1fe1893cda820bca23a9d359ffc5076df2" name="libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="5d3a58f8d20df78aa5412f506a2bddd13655c7b6ab766776358d472394134371" name="libswresample-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0a943f68c80955ad1a2b38934337ca4b492a540e9b3f4f8a78b7aa01ffeb86e4" name="libswresample-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b40f5457defcbf1a747702d225fb355799633ad7568ce7e60bc90dc6c4d98a5e" name="libswresample-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="7e2fe0400ef061b7cade18f00dff93bc2e1c2d7a31d523b4b2741a1fdb3220be" name="libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="80f9b05fe881c017c36264692847f97dfdff9664d84c9ed89aef0b3f8accec74" name="libswresample2" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="61c09702be349f5b62d623b18c3d46c5888f46b8174175f9595b0cd90a3c68bb" name="libswresample2" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="034a223f8c8412ff66c22d2bdd8b238e3fd0d0701ef24003cf9da3579a933750" name="libswresample2" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="189fa20f463aa762684f7d5ecdeeec4ed059763673b4fbc0f84b04306e6410f4" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="feefda1b3a963b8bd6131788803cf7123e30e31f1911a6b3e724c9b6f0262bff" name="libswresample2" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="a011d41e363dbc174f436f063ed228625b8359305192b5b27472db3320c6b277" name="libswresample2" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="3734d368019ddf9e58f89ed941db8b70cf1966644c16082c9c1d3feec34cbb1d" name="libswresample2" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d4efbe37f47a6111f7110834b617df1e831994ac19c0a089158e19db9cad9953" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="560e38407db9e9351482dbe6025c1b040c0aeb2980cb034178f45880e77f0b11" name="libswresample2-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f917890a55b94c9a502fe3b8b50b89ee32ebbcf1d959836e9b92f596f6fc5f31" name="libswresample2-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9f57bb93d1f0cc4b437f7a2823b56b24c2ed5f1dcdc95c7cf23c0c30858bcee7" name="libswresample3_9-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="ea9c8f763bdbc047261ca3451153945bd2e959f265b23edc392f53fbb349271a" name="libswresample3_9" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="53ac51d28e02ed9d532406285aad36b29729e0379f687afc5fb8a01a00700d4e" name="libswresample3_9" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="0aace12bb30e7268c8728d32788967b1b89ea01f06d09dbd3ce3462c794b2845" name="libswresample3_9" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="b549a368c06f190c420a8b515ed34f387b7a391b1e0dd6ea24f57575e1877c36" name="libswresample3_9" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="759a0ec736f52a663ddfa0394730e4f5b2db1569643b7494f5b74152cefcda60" name="libswscale-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="ae3247616af9b5a0c3c81803957e96c3dfaced98f45a0d4c1bc6de101ee47aea" name="libswscale-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="24e3dd8518bb543290c8387cff90b505ffa271cb7dc9a6ab24b0b73ea80d61a0" name="libswscale-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c02b372c5449435c771bc76960b6f6f281494ecc96095542789ad5a165d407fb" name="libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="983e36e2e07aca70a511a756d3bc6f23d8c6cac2adee143e100eca556ebe5066" name="libswscale-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="c5d2b8ee08bc092e25e65b63119464874d9ee0eb3b90e2ea95fec39affd0658e" name="libswscale-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="83c0216b8fcfc2c146cd9d1edf16e32f263c114283c628b7c415b84b1de3fcd0" name="libswscale-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="e4479cbb59fc7f057dc3cfcb1f7bef6b6e32281c0220f83f788495db0cb9d994" name="libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="5447a421ac2c490e72e8af7028139454428a1c479753dbaf302fd963ad3dc57c" name="libswscale4" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="f67ecc162057f1abde15db393d4ef2dd97e69ba2eb3546d2fef3142bcdfe9954" name="libswscale4" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="2d70094c1e114bf4a5dea4ce8d72262fce220d82e99eb5f9dcc61036d94b8e1f" name="libswscale4" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="c88aaf7ae112531df14acc33a7b73d51fec7455eec16d2438071d1cba9f14f48" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="a8d133db1bb5a63b454f33c845294a29907983053324373d68dabe0abf01fa58" name="libswscale4" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="210ef8d2310557b850ddbe4b397c8b2629f14bb1d10ed11a545979f38b9fb35e" name="libswscale4" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d548086a512e1aa32d2c1a0a3e47159c79ac04255e049d3fdef7762327ea89ae" name="libswscale4" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="02bf34a6e0690633b7f27714ffd4531d0373cef8e5be47ff82d0bed35bf4e30c" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="5a6143c861f225a294f17ec422e22959ae383c04453ddd81518474c83dd012a3" name="libswscale4-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.44.1"/>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
</package>
<package pkgid="ef23fbd9acd518aba72d245c0203b562d70e7f4a0e965d2e9599e555d2d93d79" name="libswscale4-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="150200.11.47.1"/>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
  bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
  bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
  bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625659200">- Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
  denial of service in the subtitle decoder in handle_open_brace
  from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the ff_frame_pool_get function in framepool.c
  (bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the wtvfile_open_sector function in wtvdec.c
  (bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to
  a memory leak in the av_dict_set function in dict.c
  (bsc#1186863).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628769600">- Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
  a heap-use-after-free in the av_freep function in libavutil/mem.c
  of FFmpeg 4.2 allows attackers to execute arbitrary code
  (bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
  a heap-use-after-free in the mpeg_mux_write_packet function in
  libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
  service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630497600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1632744000">- Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak is
  affected by: memory leak in the link_filter_inouts function in
  libavfilter/graphparser.c (bsc#1186761).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1634212800">- Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
  integer overflow vulnerability in function filter_sobel in
  libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
  bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
  CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
  CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
  exposure of sensitive information on ffmpeg version prior to 4.3
  (bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
  out-of-bounds write in decode_frame in libavcodec/exr.c
  (bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
  an issue was discovered in function filter_frame in
  libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_input in
  libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
  buffer overflow vulnerability in function
  filter_vertically_##name in libavfilter/vf_avgblur.c
  (bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
  an issue was discovered in function latm_write_packet in
  libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
  buffer overflow vulnerability in function config_props in
  libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
  out-of-bounds read vulnerability exists in long_term_filter
  function in g729postfilter.c (bsc#1190729).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674043200">- Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
  division by zero at adx_write_trailer in libavformat/rawenc.c
  (bsc#1140754).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1693396800">- Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
  vulnerability in av_timecode_make_string in libavutil/timecode.c
  (bsc#1214246, CVE-2021-28429).</changelog>
  <changelog author="meissner@suse.com" date="1707220800">- ffmpeg-fix-new-binutils.patch: fix build with new binutils</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="34cc039ad7066ef95eb7ee52fae46ac219cfdddff9e95ca9d6a88df1b7080499" name="libswscale5_9-32bit" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="1801777cdfed407b9ae034d8865fa393173f7b174a1ac9c84fa5d6e45824863d" name="libswscale5_9" arch="aarch64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="ad8a4f21572ec27ec436a3f369c0e754dbd2439d500062475a13a47ae2d2e618" name="libswscale5_9" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="af9297760300b18442a7f94ea3f307fb09216194c275d4a3f38e1bdaf65aafa1" name="libswscale5_9" arch="s390x">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="9fdac1e4034736dc259734f82459a0b67fe9004a9e608d5832ee598174fb10b3" name="libswscale5_9" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150600.13.5.1"/>
  <changelog author="jengelh@inai.de" date="1618574400">- Enable libdavd1 on Leap 15.2+ [boo#1184830]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Enable vulkan on on Leap 15</changelog>
  <changelog author="jengelh@inai.de" date="1622808000">- Enable SVT-AV1 encoding</changelog>
  <changelog author="alynx.zhou@suse.com" date="1625745600">- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
  a denial of service vulnerability exists in FFmpeg 4.2 due to a
  memory leak in the avpriv_float_dsp_allocl function in
  libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2021-33815.patch: Backport from upstream to fix
  dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an
  out-of-bounds array access because dc_count is not strictly
  checked (bsc#1186865).</changelog>
  <changelog author="hpj@urpla.net" date="1625918400">- Remove second hunk of ffmpeg-CVE-2020-22046.patch, that contains
  a goto to a none existing label. In order to distinguish this
  patch from the original, I renamed it to
  ffmpeg-4.4-CVE-2020-22046.patch
- While at it, refresh the other patches with offsets</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628596800">- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
  the return value of the init_vlc function is not checked
  (bsc#1189142).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1630065600">- Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
  adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
  does not check the init_get_bits return value (bsc#1189724).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1668513600">- Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix
  out of bounds read in update_block_in_prev_frame() (bsc#1205388).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1672056000">- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
  null pointer dereference in vp3_decode_frame() (bsc#1206442).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1674216000">- Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
  null pointer dereference in decode_main_header() in
  libavformat/nutdec.c (bsc#1206778).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1682596800">- Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
  use after free in libavcodec/pthread_frame.c (bsc#1209934).</changelog>
  <changelog author="meissner@suse.com" date="1699012800">- ffmpeg-fix-new-binutils.patch.txt: fix build with new binutils
  (bsc#1215309)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)</changelog>
  <changelog author="sndirsch@suse.com" date="1707739201">- ffmpeg-avcodec-libdav1d-fix-compilation-after-recent-libdav.patch,
  ffmpeg-avcodec-libdav1d-don-t-repeatedly-parse-the-same-seq.patch
  * fixes build against dav1d, which has been updated in
    SUSE:SLE-15-SP5:Update (where apparently no rebuild of ffmpeg-4
    had been triggered)</changelog>
  <changelog author="qzhao@suse.com" date="1712750400">- Add ffmpeg-CVE-2023-49502.patch
  Backporting 737ede40 from upstream, Adjusts the logic to consider
  the chroma planes and makes the change to all three bwdif
  implementations.
  (CVE-2023-49502 bsc#1223235)</changelog>
  <changelog author="qzhao@suse.com" date="1713182400">- Add ffmpeg-CVE-2023-51793.patch:
  Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
  out of array access.
  (CVE-2023-51793 bsc#1223272)</changelog>
  <changelog author="qzhao@suse.com" date="1713528000">- Add ffmpeg-CVE-2024-31578.patch:
  Backporting ab0fdaed from upstream, Fix heap use after free when
  vulkan_frames_init failed.
  (CVE-2024-31578 bsc#1223070)</changelog>
  <changelog author="qzhao@suse.com" date="1714219200">- Add ffmpeg-CVE-2023-50010.patch:
  Backporting e4d2666b from upstream, fixes the out of array access.
  (CVE-2023-50010 bsc#1223256)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716465600">- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  Buffer Overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (CVE-2020-22021, bsc#1186586).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1716984000">- Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
  libavfilter (CVE-2023-51794, bsc#1223437).</changelog>
</package>
<package pkgid="d6c30c7aec0d73d66a1d2f4d68d0798e896f02b555d0c1af7eaaf36748e5f5a7" name="libunbound8" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="9d73f1dfc9856f9e8c3e0b6ab0ad3275f3e746a20f08b3ef86bf31bb78088e39" name="libunbound8" arch="ppc64le">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="1a04b7417baca70b743c1ae891ac69246bd9d139c4248f9bc8a3ef743d2dc1e0" name="libunbound8" arch="s390x">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="aed6160b2f806136d8c3d3a58fd2cf42848d2cd82889bcab0c84148def750003" name="libunbound8" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="30f84f105fa39b8a15f24d8dd301870bb3a370b11b6374643b664a04b371f8e6" name="liburiparser1" arch="aarch64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="cca4c47d16ecc01cfe522a27cbf9fac91b9f918dcbf74260ee6cbedc503a801b" name="liburiparser1" arch="ppc64le">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="4852a73f4b3d3b8bb081b09cd430ac80bcbb468ba25c266a37eacecbe9929f62" name="liburiparser1" arch="s390x">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="2e5243a02f0f67b5b342e52cc9660972f9350a0f763b4c8ac852049bef282c06" name="liburiparser1" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="80449f18c1f5d36e13b86fa9b0af2c594317b2983b71ede9dfcea8f4277bf564" name="liburiparser1-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="b78c77189c63d74a1b046bb7565464755d94bea174703535ed6e48e7f46760da" name="libuuid-devel" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="25bd17fb9b8ee9972bea81d71d4abca915c2d20fc84f105bf8ec9359ba9ed233" name="libuuid-devel" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="3ba9270d0716dc774d83636d87c033497e51851231f68531f407fb746ff32c3b" name="libuuid-devel" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b765a6e2ae7f348b9a9324a66e4222f846548b1abcdd0ceed9f527a23f1e6a0b" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="1abe3baa60a17043881a7c3925a6b1e4fae3ed384972afb50d2a43ef448bc286" name="libuuid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="f89f5c69e47d27eca210f803f49ac29edd09630f1fe4271722d620f7dd3064bc" name="libuuid-devel-static" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="a0671291f02f658e14c5fa7b3cbf417370686ad7ad9f6d09b3959eccbddd8dfa" name="libuuid-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b766daa92fb80d1bd5c7b8a6abb28c9a3876dd9f0c7cb208fa2e6dc035a799dd" name="libuuid-devel-static" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b7271892152247e863a252acd5db893e92685d277624dc8bfa7b66ae708aae6c" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="cc15497f86c4ac2e8a1bfa6547a04ef991ddb3bf38641dbd82819e43bace1c01" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b7e80b3604566ae71e35e5f3af86674f312d2f5e23b578d3b7bc1138a42d1bad" name="libuuid1" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="75ef9dfbea4a6fa38f9f821a99a6225149949c54c3ed53047d068d721a90c396" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="c6c6831bfa5ab54672a4afa93d769463f249611ef8b40bdc6abf4f1d2eef2f38" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="342b862c2ba4621ed7f705bd88293f4d60ba69b23571e013a4f5b082937c7924" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="797269a32d3efbc3a07f7c202f71efd7cf82d0b4e199d2f4927e30898603e0fd" name="libvirt" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d0fda2da91c4fec0e3114ceaee6234b65d9c93b481b7ca43cf2ab78a7dc53b1b" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c546323cf2d1851c7252924f3b31d1eeb2f59feb7aa7c43b3887a73639f536af" name="libvirt" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="1fb131abe3b8ca03028cb91de59a4f0ae1ccb88bcbf382219054c9d071762975" name="libvirt" arch="src">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="5c3e4ff879b06efe8e71d23755e6ef96c5522cda79b82fd8b44b54d392e5063f" name="libvirt" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ce76e3079bd5bbaf9df9dd0389cdb6ddfa9f581559f6ef93386f634b32d0f22d" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c73448327d19432644ed8494ddf86a8f07e44ec95c57576ed190218724d2e514" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="a15c496b2045bbbc07268bd884f8beff4a1b6930b20230b08ed2719930b7ff74" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="18951a1adbe7d4439f8f7aab01391a9616f1998c22e8fadbbc9f1893428104bf" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="71ddfce8960ea0b6a83c72464049f1fa87e1a90af0cf82efbcfd8a43b0abe477" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="73c6d6a1f4a2b4391b635e5de183dbff3991aa301549eeb0982e796f8e8cc0d0" name="libvirt-client-qemu" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="e4bab3e5f6ef4c83fdd7165736267c41d6f1fbaf9bf6467bb7720986622c2c34" name="libvirt-client-qemu" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0924acc345d81464872abf6419b85524fe66cca6e8f3719cb16069081e7110a7" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="49e5f53ae5717bd99b9b1da54c8bb79267b52083245e2c65b874d70ff43decd8" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="a0ea1d3f6fc2efeb005474c63cf643db6d114a3b734f48c7198490175a8a2a96" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f41bd336cf21f696f3b398b3dea8ebd9aefa618717d1f4845b2995a79874217e" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f5eb43a8208f25730d7b6820321c797901c9cde638a8d850c626a4524bf6db40" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="acb33b785f5c228f91fbb2013b2eefba315026de5b14894e9d44f9acae01dd69" name="libvirt-daemon-common" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="eced849b7726d5b80fc6c9ed89e41e54884dfdbc0a691fd0b7ef774459be0b2a" name="libvirt-daemon-common" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="08d0eba42e29e974255b547404ea01a770e7b189c5335e9189f4cf2ae53eb5ee" name="libvirt-daemon-common" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="451098e17553433afce35c5152bc442bbb256c0a3f351adc5e7391a8c2994d8f" name="libvirt-daemon-common" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b0aa093b8cb98ce0dfa0f6fd3ab9a36c8cc45abf908a8b59f77268e6c7477fe9" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d4afe218a39703c29513be4511362868d74e535158eda6cc55ee848f97941eb2" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7482eabad17d1a610f3289da29a0244232cb29b57f33c6e9610c6639f740590b" name="libvirt-daemon-config-network" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="822ca788e85db8cc7d844ffc8569fb9dec498a6f0a2ecea621d526e3d131e687" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="96e259108057211088e7ff1093835fb8ca7c13cbc2a4f0ed51aa92b3976f4ca3" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ceb5c629109b016c69a2cb592577554f8551161d64a2fe8e1c115a45fb3c42dd" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="88fef988b0851e93b9f126dd701cc1972e84fb10bb98439a17f421ed3ce15209" name="libvirt-daemon-config-nwfilter" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="e7fedf464189383c82e0122573490c7de138798b2b7448f8f60cc9cba0a1682e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b790a6a7de19f735084f9a64ad0713a090ad71522cd0eb999e3a76189e6179a6" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="fa0dbaa0dd848d6dcdeaf6fe70519ca6719d65c1ad295b14a7fb7f7193201289" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="edde8a1c0524c9fede153bfc5f9714cecaa7e2f9ce119d5d6de97373130b472e" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="61eac0198177017a6e461bc0a32a951960ba190339f661ca8bd701df76a165ed" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="91808406f9dc587fde37383bada724b7bf6c9f7792ac83f6e6eaf39b48d71906" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0af9d9b8c4f241df59fe6fed8cc0e40e4f6be403e06dd78a4a5085291eb72971" name="libvirt-daemon-driver-lxc" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="055aa36c6642c524a808658ae13cb67b85cc41c94a2e8417af8e9b0215bafc03" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0e228d0b8d158707fe618f20eb934e0bba91a4fce636f3a7cc4a912c264ccb48" name="libvirt-daemon-driver-lxc" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="2c9d57f0645a165d3c2f84f20f56f1e9a4f66aef2de726a6b64adcb0bfa0020a" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="9c3a7da30c82ae28ed2c70a33e458302d8749a5e2a2244fe34809e6244d8f106" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0cd71151ae573b70636fdb43c49bdf4109147779ca7b637ebae5a8b0dde9279a" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="18b54dbab3759f7381fe4ee1f20731d9736f1bb4fc9d8966ff2a58262fbd31d3" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3aacd6a428fe82a84a5dd134d2d97e6f3f0ec3154283529ead71d7f5248e1d6a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="edbd4fd9facaa84f2f6f5f6510d591bf4d4aee895a4b762b2dac72ef92ab9e7a" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c6ca39946bf15429632125c2135d15d4ad14ea0fd9bc3149c7447710c8df79d4" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7cd73342eac5cac7feb26209f9757d38f4d21389d58e45cbdd4b0ba75d831677" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="50d6fee24b60bb20911d3e0175a88ff6eb9ee93adde7ca595f09c6b75a36d500" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f31be7caab3de8481776f325152e3fe06054808911a4abb7b1dbccaea9db3072" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="54367fab84194ee0b7cf9a87b7a5ee3da1797414272cfe80aaa285c53db0446c" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="fd5e3bd86a4ff41788aa34ccb7c5f06ea1edbaca8c8a8b1bef7d862398250a55" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ee44c0b0634c7be8fe2140f3ca719cc161d99fbec63398a1b6455b001d8cf141" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7dc934cbc71109b261d7fe8146c4cf2d74dea1f18b08a1ee429e9662b62a1f08" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7ad1af89f0781e880e193909f366a030ace370108926f1ac2b282a85a3584c20" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="dd89b5eb4fb4fc7d7af37d63aae0ed9aa77120e9a31d11dc983a837446ebe8bd" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7ca4cfc4431a6c6d1aab6f6bf9186336883c26727185559f000f1f74e102c01f" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="181aa5ffab2aa42af1bf03e4c7cc54d7cdfdece2194b798e205ae204dd861b95" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="e1e2571de4d996a9bc6839d0c750cc08e79b1081885d138292767466409ef352" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="25b182dbe87b5cf05430e7770275d1be209bc466cffb0ff944d931844665dfc0" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3fc94aec20cdde90b641d8fa1f44697211e960e9251ea214c8f69829171bb471" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="942cb0d2291297cabcceca9050926c3cb73a5ee57d4e1107f10718f9905bd379" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f2a14388c51bcb53dd7a0df0a431584b02d43258b5527d35e0982fe2b23ae9b6" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="faed04f570c1aee9b76d5dcf362bdc33c3ba7f80b44d4553968361a04db6460e" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f3ebf8a684fac492aa40943ee41d34ca31d4a4028561ef45781f9361b8eda710" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f2debb713179256e43ca5870f62ad370724687e00393edd6513a263eec5469e2" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b97d7339697cb7ebaffec1cb454f1e85c4e7902f8cbf34f8ae383a70d6ecdd8b" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="2f0dbe7c023eaaaa8900c28b36e30f25f807896263bb566b884ce94b890c11ad" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="cf7eab16d514345cf3d521614c42850cac626350b343d8dd6d6fee2d2bf6d02e" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="8af87baf431ce12254d752efb4e3e38d64e40edeb03a1effc9a4125c5d92d74b" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c1e16f81240c81b790af0e309a101fb23718a524a3572845c8c1ae9150080f65" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="939756cbb2184fce5bcd8a2d31a7ecfb8be4cf2a87bd8fdc8e7abd17aa484cfd" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="9633cf677e5b45e284377b17a0d77b4dc03a48fae962d1593241a9cc3b77c185" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="a290485cc764ac54f57c09c2e5aa7c2756a9688c7e518f1a815263e80e6027e3" name="libvirt-daemon-driver-storage-gluster" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c708cbb16430680fc5db705e6e4175d70c88f0b499d8cbc89c09b46838e92152" name="libvirt-daemon-driver-storage-gluster" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b3dd25ce2259d297c6b7ae333426c017a0162ccd9e1fe087e70343979d0652e4" name="libvirt-daemon-driver-storage-gluster" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f5db0ce6dcc7da07775e9e612c5ae02e7a3959046e895cc2eaef37c15084c12d" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4384d38249647b7b93512d3bd9d97a78bd5b48cf0a50668d0e5da0eb11eb7537" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="189ae71ad7adadba86a430b7d96b98f1a67d5519842c687b4998065b403f4759" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="27126ab35262f90127b412d58adcdb002b4374ffcbab161cbefc1592b6ab9e62" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="5b9fa88dc4c549f4ed7193e6084cc79c88fa5132ed10633d0c87bedc516ee894" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7baa531d3342efa90049d8ff4de47b76cc7d318dc91a90d3e43a16cf241485ab" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="a984192bb298e2a4b9beff6d295416df30d806d4eee61709679fa090e6f920e6" name="libvirt-daemon-driver-storage-iscsi-direct" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="24baf2ea2415c95b56784273628eb429ce1abbd35401d7f4d2ae56f50f2471c5" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b22dea79a528fb92ccc3ea42c91e69734e18f3fdf049b5ea4dccb7d32077c11d" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="787f3f61ee115233b235a0764c5c0486d61335e96af84077127e0159e5c6d571" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="fc9f1395bfd1b82ea3e73c4869231df76bb5e56add6e58deba6537dd7883146f" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="6ee138daf548b073aea9fdadda7669a2c08636c738e6c804ca09cb0181087100" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="dd31aa0aeec3039ee8c3f507b627768d9029477ee9171955987bd21342843282" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ed7462fc4763d0b0cea3db400f97a48e0cb4bd5eab9f50b449e4239a21d0a553" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d4b589002edf30b162e6d6569aa921125c5f03de80157e1bb14c8b88ba234f96" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3a80c93255767e621494fb892ec71707f14416aa2f6ff706bc8b2b0c5d97f467" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="1eaf14e5a1fdf555bbc2149f4ffef638b435c62dc86c0af85c73e265be3d53a8" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c2cbbf5249c1dc99ddb10321907ac5b8407aab1b25da051c1f42642fed8bda89" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="7c0862de00c26ae98587e3e12d511ee6ad77cea7fc80774d65178c7d65635f7a" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d7e5c3645d7802d2dfa198b7ff85f02917ec83ec69a6e16c529f3c145c66496a" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="166154535e7d2449d799dbfa251257c92402b6695ee179ae281e92ec8fe15b75" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="9c2f318bf83be962cec4fbbc5fb99d10ba690d66e335e51f380abfdcfd8ed5bc" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="62b15571168f29c13b203aa4299da9955eaa69b396ea563d0f0202bdc6c564ed" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="5c70045218e1602e62fea112b98aab000302da203a455c5a576ca3fd7cfa35ee" name="libvirt-daemon-hooks" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="6129458c827c2e2148a22725583aaa79a04786caf43f10fbf3969c7cc42e7671" name="libvirt-daemon-hooks" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="06842fc7a9d29b271383bdcb6a52c1e6be064b1721c5bb0a6bf744bd23dab623" name="libvirt-daemon-hooks" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3077e2c08ca69e7b844c03e5251ed57bd308cf5fe605a240e32f9012c72c9b93" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="6f128accd2ef97c5fa6766bc3af99d01f996db44cbc679d082251d8ef3fc3e25" name="libvirt-daemon-lock" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="cd791ee6c92ff1a8bbbb248b9c015bd764ce71d4776acb1c2b7ee8373be35650" name="libvirt-daemon-lock" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c9b3fe058be8f4475592f1adbd9118d933ad0e35616e51fdf43c582c8756d037" name="libvirt-daemon-lock" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0013a01887707758e70ee770edba0d7a9b73820ad829472a8331c425464fdac7" name="libvirt-daemon-lock" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0252b62ce55d7c26083da3deac275112e6344c7069b1831a8f372bfe0a632364" name="libvirt-daemon-log" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4b44db493f2f512eedf68faffb67ae7b5741351165ab614e8b5c987da0810b56" name="libvirt-daemon-log" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ef46fa749942c73b66ce061c385d1d148c4a4ef87b3c8504f53597935940f001" name="libvirt-daemon-log" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="70b93599a0b90d5190048253df7dafabc98ee8258048a36a45ba28f823d26ea5" name="libvirt-daemon-log" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="1c78a2b2696f157086f3f388d59e791ddaf0da8dfef76d0aa603d0ca2abcfd60" name="libvirt-daemon-lxc" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4d626d49ed8e1d1b6fe2182944e315fa669cf7223d855c20ca34ae911475c138" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ffc7847644104b12fbc0a0be064935777cf6b0db14ad309e154e43c09b28abfb" name="libvirt-daemon-lxc" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="dd0f3b6db858b2b536c42c43d6418290e5ae2beeb6338c5cc7e5c85a5875af06" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="f8595fc2bb6e7aaee7117e1ebc20a12f921dad38e142b8cce89ce6b58b408580" name="libvirt-daemon-plugin-lockd" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="25b01693e04fef8f1916e081153e1c76688f6953e6a3a3907e544fb38e9a5856" name="libvirt-daemon-plugin-lockd" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="6dc19df2db15c8dfa1d3829d38348c55283b26b24b305c11528292f27fa22609" name="libvirt-daemon-plugin-lockd" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="76f32c2617d2e4ce0605db87cef82f3d92d6886998e13accd22af7349521c75a" name="libvirt-daemon-plugin-lockd" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="9825f582ea2bfff14e30a6913a778beea3cb7928909359a10315a083f20fb171" name="libvirt-daemon-plugin-sanlock" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="31ea1428901a538837fcc9f7e884694fbfe2db54b75d2193c1f28cc4e1c958ff" name="libvirt-daemon-plugin-sanlock" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="337670c97c05e0f776ce249977da90b781997fd3131a81319350ef93017d3a04" name="libvirt-daemon-plugin-sanlock" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4a0889b3721eac72f0d840fb613bd81230c0b6761a00406ecc298d454972ab43" name="libvirt-daemon-plugin-sanlock" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="cefef44d073078844be0b7cb64b5cc7b1d89d4e89aae14e6972b114e0b696c66" name="libvirt-daemon-proxy" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3fb01ddd5fe5d487751813ff8282b3c18bc0ea2dd12c255e46fec545497b3b70" name="libvirt-daemon-proxy" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d2e3d3bea159c3074d1a237cc909d0d9f76b3813726fdf05508a6382819023fc" name="libvirt-daemon-proxy" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="2e8f94583ae928f62e1c40b0c33d0ceab572df42a1ecbbd2951cdceafe575621" name="libvirt-daemon-proxy" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="92a3d966c607547f73a6854ae8af5897a653b0108c5bfea3299f8dad649451a5" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="aaf70ca5cc9af9d4e948b15e2f047e4a830fea0b48df7aa2b5ad9815104673a1" name="libvirt-daemon-qemu" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3349e6b02bb5255e394f329013ff081a85fa38c53c47faf848dae66c2123c6cc" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="1f5a12995699c9fdbee20135c27723a87a8b2fe05e165bdb40eae2be5d8b3b76" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4f3c0065be952453bcae56cf05de056f352c8acb407510670f9a2f065e7d9e0e" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="2916d40f0697f1486151e1c4d0edd32f0fb717980f130a30bfbde63935c78931" name="libvirt-devel" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="8424619295ddffb2d004fc0c5b9e1f745c97989f5a55a21ec5aa830a1b2ae1ad" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="43ad2de509f2986ebdcb02193ed64e2103ee9e9e7c353fac26a6794ffe391744" name="libvirt-devel" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="ecf77f782b2151215d5833a87a8bf73263e63797e93a49009a7cf7a4890b6289" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="243f1a8982e03505bef4a756b93ad4853d752a12dd06d360866d1e26951664ec" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="3c8de39bc00c0b534552baa7348f57673680d7a556fd86f0fb6fb8d22e5b4f43" name="libvirt-doc" arch="noarch">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="b5b37dd2016bb524e040ef5cf13093c7af8681beeb5a53c2892cdae3169d3f44" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="e5e107c92706560ed511822c111c90b80ea6307a8176d1947c081297c87a4288" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="658d89d1d5f0092f19e0e29be2c410ba1843e66c99ce2fd33965094725385e77" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="a83f0cf2a655d75e632e17a079f8a57e89ca501f93f9f66dd2c86c3a64e5ccd9" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="c9df6d52ca42b196bc927098189dd1f94cc6560b43264b22a1509aa796af351c" name="libvirt-nss" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="d74c707842f2940c5a4ab38eec9bec68e9909e65a696037170f98d336478606c" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="88113629843a1b5bfde1aab24bb2595bef36e3ebcd9368d046348d35e793110a" name="libvirt-nss" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="506bdcb960879968d830908e63ee1897ec92ea87c706a4918fef29a8e5c06dba" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="5d11c3e0eee83f448dd45a1463d63c79ed0205d5d58851591e40b5d5db2b596f" name="libwebkit2gtk-4_0-37" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="7982bd8e1dea1c0719b9f1f12832f4e115f0f0c845a31bddfe8da277d17764b3" name="libwebkit2gtk-4_0-37" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="896d3a80d5e312f019e92742dc38604b97623eea71672222a0c9863e5ed600e5" name="libwebkit2gtk-4_0-37" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="52649a3e013794981c0d59e9cce85417fffbc7b30071303a22ffee53706678e9" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="caa596db046b45c3f5afa3728a330282fed9e30e22b6dbf8d5e9a8cf82bb6c00" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="2b6674fc3fddfb9323b68aa0db4d0f95750879676f0081c49b15d5ba21794fd6" name="libwebkit2gtk-4_1-0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="11ac5158c2414104048eff21b76948600aa8e8be1da09101529d34fe684fed96" name="libwebkit2gtk-4_1-0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="3fdea309b128e2bb8ed06b938a7ab69c1096b48a3a455b11372a51e7ef3eef0d" name="libwebkit2gtk-4_1-0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="adc51c6071532f341885b9ff55db8c6164d2bea8420ace791796ef78f6c125be" name="libwebkit2gtk-4_1-0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="65f192c1e908d7d59e072fa60e537709350bd3d463615f8048efe98de0abc68b" name="libwebkit2gtk-4_1-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="2ab2f85055eca996fde4cb1039d6e70efb8b6c05842a70c343607cc15ec97dd8" name="libwebkitgtk-6_0-4" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="e7a397d2bc8c56546c5cf8ad275a32209008de482e301630ae44c027d5536fcf" name="libwebkitgtk-6_0-4" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="c42f4b21867f40bb3fff0b6a2e6a7b858608637e4218345d1e2f17231bb127a2" name="libwebkitgtk-6_0-4" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f15272006909e25d2dd311411becdc2440a397758f785ac3444bbf793f42d70f" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="fe8a6c7c87e9f6578987e7faef18b66325e9b6e9b64a421d45d00245b84edcf5" name="lifecycle-data-sle-module-live-patching" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.111.1"/>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1651665600">- Added data for 4_12_14-150000_150_89, 4_12_14-150100_197_111,
  5_3_18-150200_24_112, 5_3_18-150300_59_60,
  5_3_18-150300_59_63. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1657540800">- Added data for 4_12_14-150000_150_92, 4_12_14-150100_197_114,
  5_14_21-150400_22, 5_3_18-150200_24_115,
  5_3_18-150300_59_68, 5_3_18-150300_59_71,
  5_3_18-150300_59_76. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1662638400">- Added data for 4_12_14-150000_150_95, 4_12_14-150000_150_98,
  4_12_14-150100_197_117, 4_12_14-150100_197_120,
  5_14_21-150400_24_11, 5_14_21-150400_24_18,
  5_3_18-150200_24_120, 5_3_18-150200_24_126,
  5_3_18-150300_59_81, 5_3_18-150300_59_87,
  5_3_18-150300_59_90. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1667563200">- Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104,
  4_12_14-150100_197_123, 4_12_14-150100_197_126,
  5_14_21-150400_24_21, 5_14_21-150400_24_28,
  5_3_18-150200_24_129, 5_3_18-150200_24_134,
  5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1673265600">- Added data for 4_12_14-150000_150_109,
  4_12_14-150100_197_131, 5_14_21-150400_24_33,
  5_14_21-150400_24_38, 5_3_18-150200_24_139,
  5_3_18-150300_59_101, 5_3_18-150300_59_106,
  +kernel-livepatch-5_14_21-150400_15_5-rt,*,2023-12-23 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1678449600">- Added data for 4_12_14-150100_197_134, 5_14_21-150400_24_41,
  5_14_21-150400_24_46, 5_3_18-150200_24_142,
  5_3_18-150300_59_109, 5_3_18-150300_59_112,
  +kernel-livepatch-5_14_21-150400_15_11-rt,*,2024-02-23+kernel-livepatch-5_14_21-150400_15_8-rt,*,2024-01-26 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1683547200">- Added data for 4_12_14-150100_197_137,
  4_12_14-150100_197_142, 5_14_21-150400_24_49,
  5_14_21-150400_24_55, 5_14_21-150400_24_60,
  5_3_18-150200_24_145, 5_3_18-150200_24_148,
  5_3_18-150300_59_115, 5_3_18-150300_59_118,
  +kernel-livepatch-5_14_21-150400_15_14-rt,*,2024-03-15+kernel-livepatch-5_14_21-150400_15_18-rt,*,2024-03-28+kernel-livepatch-5_14_21-150400_15_23-rt,*,2024-04-25 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1688126400">- Added data for 4_12_14-150100_197_145,
  4_12_14-150100_197_148, 5_14_21-150400_24_63,
  5_14_21-150400_24_66, 5_14_21-150500_53,
  5_3_18-150200_24_151, 5_3_18-150200_24_154,
  5_3_18-150300_59_121, 5_3_18-150300_59_124,
  +kernel-livepatch-5_14_21-150400_15_28-rt,*,2024-05-17+kernel-livepatch-5_14_21-150500_11-rt,*,TBD (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1690545600">- Added data for 4_12_14-150100_197_151, 5_14_21-150400_24_69,
  5_14_21-150500_55_7, 5_3_18-150200_24_157,
  5_3_18-150300_59_127,
  +kernel-livepatch-5_14_21-150400_15_37-rt,*,+kernel-livepatch-5_14_21-150400_15_40-rt,*,+kernel-livepatch-5_14_21-150500_11-rt,*,+kernel-livepatch-5_14_21-150500_13_5-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1695297600">- Added data for 4_12_14-150100_197_154, 4_12_14-150100_197_157,
  5_14_21-150400_24_74, 5_14_21-150400_24_81,
  5_14_21-150400_24_84, 5_14_21-150500_55_12,
  5_14_21-150500_55_19, 5_14_21-150500_55_22,
  5_3_18-150200_24_160, 5_3_18-150200_24_163,
  5_3_18-150300_59_130, 5_3_18-150300_59_133,
  +kernel-livepatch-5_14_21-150400_15_46-rt,*,+kernel-livepatch-5_14_21-150400_15_49-rt,*,+kernel-livepatch-5_14_21-150500_13_11-rt,*,+kernel-livepatch-5_14_21-150500_13_14-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1704715200">- Added data for 4_12_14-150100_197_160,
  4_12_14-150100_197_165, 5_14_21-150400_24_100,
  5_14_21-150400_24_66, 5_14_21-150400_24_88,
  5_14_21-150400_24_92, 5_14_21-150400_24_97,
  5_14_21-150500_55_28, 5_14_21-150500_55_31,
  5_14_21-150500_55_36, 5_14_21-150500_55_39,
  5_3_18-150200_24_166, 5_3_18-150200_24_169,
  5_3_18-150200_24_172, 5_3_18-150300_59_138,
  5_3_18-150300_59_141, 5_3_18-150300_59_144,
  +kernel-livepatch-5_14_21-150400_15_53-rt,*,+kernel-livepatch-5_14_21-150400_15_56-rt,*,+kernel-livepatch-5_14_21-150400_15_59-rt,*,+kernel-livepatch-5_14_21-150400_15_62-rt,*,+kernel-livepatch-5_14_21-150500_13_18-rt,*,+kernel-livepatch-5_14_21-150500_13_21-rt,*,+kernel-livepatch-5_14_21-150500_13_24-rt,*,+kernel-livepatch-5_14_21-150500_13_27-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1709208000">- Added data for 4_12_14-150100_197_168,
  5_14_21-150400_24_103, 5_14_21-150400_24_108,
  5_14_21-150500_55_44, 5_14_21-150500_55_49,
  5_3_18-150200_24_175, 5_3_18-150200_24_178,
  5_3_18-150300_59_147, 5_3_18-150300_59_150,
  +kernel-livepatch-5_14_21-150400_15_65-rt,*,+kernel-livepatch-5_14_21-150400_15_68-rt,*,+kernel-livepatch-5_14_21-150500_13_30-rt,*,+kernel-livepatch-5_14_21-150500_13_35-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1715083200">- Added data for 5_14_21-150400_24_111, 5_14_21-150400_24_116,
  5_14_21-150500_55_52, 5_14_21-150500_55_59,
  5_3_18-150200_24_183, 5_3_18-150200_24_188,
  5_3_18-150300_59_153, 5_3_18-150300_59_158,
  +kernel-livepatch-5_14_21-150400_15_71-rt,*,+kernel-livepatch-5_14_21-150500_13_38-rt,*,+kernel-livepatch-5_14_21-150500_13_43-rt,*,+kernel-livepatch-5_14_21-150500_13_47-rt,*. (bsc#1020320)</changelog>
</package>
<package pkgid="8869b65d2fa7533a35012360db1e8be353ad0748d7c6dd23453d30ef2230e27b" name="lifecycle-data-sle-module-live-patching" arch="src">
  <version epoch="0" ver="15" rel="150000.4.111.1"/>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1651665600">- Added data for 4_12_14-150000_150_89, 4_12_14-150100_197_111,
  5_3_18-150200_24_112, 5_3_18-150300_59_60,
  5_3_18-150300_59_63. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1657540800">- Added data for 4_12_14-150000_150_92, 4_12_14-150100_197_114,
  5_14_21-150400_22, 5_3_18-150200_24_115,
  5_3_18-150300_59_68, 5_3_18-150300_59_71,
  5_3_18-150300_59_76. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1662638400">- Added data for 4_12_14-150000_150_95, 4_12_14-150000_150_98,
  4_12_14-150100_197_117, 4_12_14-150100_197_120,
  5_14_21-150400_24_11, 5_14_21-150400_24_18,
  5_3_18-150200_24_120, 5_3_18-150200_24_126,
  5_3_18-150300_59_81, 5_3_18-150300_59_87,
  5_3_18-150300_59_90. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1667563200">- Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104,
  4_12_14-150100_197_123, 4_12_14-150100_197_126,
  5_14_21-150400_24_21, 5_14_21-150400_24_28,
  5_3_18-150200_24_129, 5_3_18-150200_24_134,
  5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1673265600">- Added data for 4_12_14-150000_150_109,
  4_12_14-150100_197_131, 5_14_21-150400_24_33,
  5_14_21-150400_24_38, 5_3_18-150200_24_139,
  5_3_18-150300_59_101, 5_3_18-150300_59_106,
  +kernel-livepatch-5_14_21-150400_15_5-rt,*,2023-12-23 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1678449600">- Added data for 4_12_14-150100_197_134, 5_14_21-150400_24_41,
  5_14_21-150400_24_46, 5_3_18-150200_24_142,
  5_3_18-150300_59_109, 5_3_18-150300_59_112,
  +kernel-livepatch-5_14_21-150400_15_11-rt,*,2024-02-23+kernel-livepatch-5_14_21-150400_15_8-rt,*,2024-01-26 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1683547200">- Added data for 4_12_14-150100_197_137,
  4_12_14-150100_197_142, 5_14_21-150400_24_49,
  5_14_21-150400_24_55, 5_14_21-150400_24_60,
  5_3_18-150200_24_145, 5_3_18-150200_24_148,
  5_3_18-150300_59_115, 5_3_18-150300_59_118,
  +kernel-livepatch-5_14_21-150400_15_14-rt,*,2024-03-15+kernel-livepatch-5_14_21-150400_15_18-rt,*,2024-03-28+kernel-livepatch-5_14_21-150400_15_23-rt,*,2024-04-25 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1688126400">- Added data for 4_12_14-150100_197_145,
  4_12_14-150100_197_148, 5_14_21-150400_24_63,
  5_14_21-150400_24_66, 5_14_21-150500_53,
  5_3_18-150200_24_151, 5_3_18-150200_24_154,
  5_3_18-150300_59_121, 5_3_18-150300_59_124,
  +kernel-livepatch-5_14_21-150400_15_28-rt,*,2024-05-17+kernel-livepatch-5_14_21-150500_11-rt,*,TBD (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1690545600">- Added data for 4_12_14-150100_197_151, 5_14_21-150400_24_69,
  5_14_21-150500_55_7, 5_3_18-150200_24_157,
  5_3_18-150300_59_127,
  +kernel-livepatch-5_14_21-150400_15_37-rt,*,+kernel-livepatch-5_14_21-150400_15_40-rt,*,+kernel-livepatch-5_14_21-150500_11-rt,*,+kernel-livepatch-5_14_21-150500_13_5-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1695297600">- Added data for 4_12_14-150100_197_154, 4_12_14-150100_197_157,
  5_14_21-150400_24_74, 5_14_21-150400_24_81,
  5_14_21-150400_24_84, 5_14_21-150500_55_12,
  5_14_21-150500_55_19, 5_14_21-150500_55_22,
  5_3_18-150200_24_160, 5_3_18-150200_24_163,
  5_3_18-150300_59_130, 5_3_18-150300_59_133,
  +kernel-livepatch-5_14_21-150400_15_46-rt,*,+kernel-livepatch-5_14_21-150400_15_49-rt,*,+kernel-livepatch-5_14_21-150500_13_11-rt,*,+kernel-livepatch-5_14_21-150500_13_14-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1704715200">- Added data for 4_12_14-150100_197_160,
  4_12_14-150100_197_165, 5_14_21-150400_24_100,
  5_14_21-150400_24_66, 5_14_21-150400_24_88,
  5_14_21-150400_24_92, 5_14_21-150400_24_97,
  5_14_21-150500_55_28, 5_14_21-150500_55_31,
  5_14_21-150500_55_36, 5_14_21-150500_55_39,
  5_3_18-150200_24_166, 5_3_18-150200_24_169,
  5_3_18-150200_24_172, 5_3_18-150300_59_138,
  5_3_18-150300_59_141, 5_3_18-150300_59_144,
  +kernel-livepatch-5_14_21-150400_15_53-rt,*,+kernel-livepatch-5_14_21-150400_15_56-rt,*,+kernel-livepatch-5_14_21-150400_15_59-rt,*,+kernel-livepatch-5_14_21-150400_15_62-rt,*,+kernel-livepatch-5_14_21-150500_13_18-rt,*,+kernel-livepatch-5_14_21-150500_13_21-rt,*,+kernel-livepatch-5_14_21-150500_13_24-rt,*,+kernel-livepatch-5_14_21-150500_13_27-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1709208000">- Added data for 4_12_14-150100_197_168,
  5_14_21-150400_24_103, 5_14_21-150400_24_108,
  5_14_21-150500_55_44, 5_14_21-150500_55_49,
  5_3_18-150200_24_175, 5_3_18-150200_24_178,
  5_3_18-150300_59_147, 5_3_18-150300_59_150,
  +kernel-livepatch-5_14_21-150400_15_65-rt,*,+kernel-livepatch-5_14_21-150400_15_68-rt,*,+kernel-livepatch-5_14_21-150500_13_30-rt,*,+kernel-livepatch-5_14_21-150500_13_35-rt,*. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1715083200">- Added data for 5_14_21-150400_24_111, 5_14_21-150400_24_116,
  5_14_21-150500_55_52, 5_14_21-150500_55_59,
  5_3_18-150200_24_183, 5_3_18-150200_24_188,
  5_3_18-150300_59_153, 5_3_18-150300_59_158,
  +kernel-livepatch-5_14_21-150400_15_71-rt,*,+kernel-livepatch-5_14_21-150500_13_38-rt,*,+kernel-livepatch-5_14_21-150500_13_43-rt,*,+kernel-livepatch-5_14_21-150500_13_47-rt,*. (bsc#1020320)</changelog>
</package>
<package pkgid="e2155b107a4c32c93de01de2347e9fcbf5187ddc2feab56a42c01a5a52c4e420" name="lua51-luafilesystem" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="a0ea2987c90c2f75b0d5e869b1c4b99809d8f86fb26154985a7f3debdb1d4a0a" name="lua51-luafilesystem" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="6af190a212cf5095670451a06ac521ad178598b3940dd7c7d7e8e2e6fb0c1029" name="lua51-luafilesystem" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="a6f29136d482feafa86ac7800d0cbea08e417afe68ff653092e7e3c039f33844" name="lua51-luafilesystem" arch="src">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="kianseong@gmail.com" date="1390996800">- Initial Version</changelog>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="d54f10ae75eb95eab321aa02f8c4a7c5c3767e37d603e75dd4f44521227ce123" name="lua51-luafilesystem" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="1c533421e4d98829a4f6276452c9e14374937934895bd277452b8868ee936c5e" name="lua53-luafilesystem" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="1a598d9ed59bc165224bae8f598c091972c4dc1ebeea233eee9584f2a7ce566d" name="lua53-luafilesystem" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="029d4867eb758cefb9cee997fb5a0316410b40a3e49c53c03980ad85ab820f78" name="lua53-luafilesystem" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="99acd9a9b857fed8ec524b329d97e90870ae71509fd1cd19524de88f38d9cf6d" name="lua53-luafilesystem" arch="src">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="kianseong@gmail.com" date="1390996800">- Initial Version</changelog>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="c59e5946cde21eacac052148a5e1bfb0237bd6830ca397708409bcd6ab27ea7f" name="lua53-luafilesystem" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="150500.3.2.1"/>
  <changelog author="eich@suse.com" date="1476187200">- Update to version 1.6.3:
  * Lua 5.3 support.
  * Assorted bugfixes.
- Use source services
- Make use of lua macros
- Add Requires for lua
- Add -fPIC compiler flag</changelog>
  <changelog author="eich@suse.com" date="1476705600">- Setting 'download_files' service to mode='localonly'
  and adding source tarball. (Required for Factory).</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Replaced 'makeinstall' by 'make_install'.</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Switch to multibuild syntax to produce results for all lua flavors</changelog>
  <changelog author="eich@suse.com" date="1502366400">- Fix provides/obsoletes for the old package name.</changelog>
  <changelog author="eich@suse.com" date="1502452800">- Add defines for the version number and a version number string
  with '_' (underscores) to keep these close together and in sync.</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- Update to version 1.7.0:
  * symlinkattributes function now provides 'target' field,
    containing name of the file that the symlink points to.
  * attributes, symlinkattributes, touch, mkdir, and rmdir functions
    now return system-dependent error code as the third value on error.
  * Fixed detection of closed files for Lua 5.2+ in setmode, lock,
    and unlock functions.
  * Fixed various compiler warnings.</changelog>
  <changelog author="avindra@opensuse.org" date="1514116800">- Fix target folder name in tarball</changelog>
  <changelog author="mcepl@suse.com" date="1587643200">- Update to 1.8.0:
  - Lua 5.4 support
  - lfs.link and lfs.symlinkattributes now work on Windows
  - MACOSX_DEPLOYMENT_TARGET is configurable in the Makefile
  - Fallback to _POSIX_PATH_MAX when MAXPATHLEN is not avaliable
  - Fixed memory leak in case of realloc failure</changelog>
  <changelog author="mcepl@suse.com" date="1594036800">- Add lua54 as new build target</changelog>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Use %lua_provides macro</changelog>
  <changelog author="eich@suse.com" date="1672747200">- Handle Leap 15 / SLE-15 where %lua_provides is not supported.</changelog>
</package>
<package pkgid="34e4edfb4443357c3425258cd6b3a53bea0ed8bc4b339453ecaee821bb90cf0f" name="mariadb104" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="07737d7d91bb11031ad2da6aa12719fc18f6feee6aadf22cf2adc1adc8d1f138" name="mariadb104" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="f6238d85bad8ae976a1621fb86cae0fd823d71ebfc7e718c1260fa55fcb84d6f" name="mariadb104" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="d1635d49a210625d808036853d64f8f9243d427764238a4702ae62991969b4fa" name="mariadb104" arch="src">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="70607d8041cf4856e81a93d6843faa64367d5ca1e8d11b6eb6b6f2a4c68b8a74" name="mariadb104" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="435752ea314496f0eadf8354eb702af094780d713ff1277c0f036353e50ce69a" name="mariadb104-bench" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="e28252c8a2ada8fc8b0d603367726af45126b5d403721ff61df9188652e25069" name="mariadb104-bench" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="0f8c403efb7739544ea793519d1a7ce8574e7dbee561cbd6aca370cfeb1f67fb" name="mariadb104-bench" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="0f4d5836cccfcabea93a8e194714e06fc8c93abee4fd3470c3c5c23df7763878" name="mariadb104-bench" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="38aaabe4a341a6c848ec12b0ff053069ef60821985a822a3db44bc0cc4b1fe80" name="mariadb104-client" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="1a6c1d6d6d62f00993eea632a3c94db2aeb159ee9674aa642635680e95322e5b" name="mariadb104-client" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="5685afc8253f3783c2b1618b25b18e03d6b53dc5c126bce83016f4420158c198" name="mariadb104-client" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="3eb785e3195af41358426acc402562f6504c7ca86fda5a72634d66e99e85857f" name="mariadb104-client" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="975805f8ba81947e982e746f4f8eabfbeffa16a190e1b67c2580e4118ea8d208" name="mariadb104-errormessages" arch="noarch">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="f421a5f0c424faad745d161412362212cb9a84290e6b305065ec07f1d2a59773" name="mariadb104-galera" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="720244aff3cb3470bc474902a4299643d60a833cd5b9acb3558a029c70213ff3" name="mariadb104-galera" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="911f899a23aa73fe8e75c0c2b5e54aa3398b67c9171834ef985e7380d88f8341" name="mariadb104-galera" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="cc3ca115faed557503c6574e103e0460c782c03aacc444d081ec6434ea7f17cf" name="mariadb104-galera" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="bf05891224642f90aa21a853a6ba0da06b5fe778f490bba9b2d69ac5c4dab65c" name="mariadb104-rpm-macros" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="3c53e0659fd242f8fb782bb01a670d7e44a3defcfdd4ee4e794ce3cd0edef3db" name="mariadb104-rpm-macros" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="3c84d55a9a864d9565806c12bb061427a640f6b688e290a208205f64d3007bbe" name="mariadb104-rpm-macros" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="e009df99aa006ecc47c049d31754f938c3dd8750d164765c10be74aee0130fba" name="mariadb104-rpm-macros" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="b5167f4263d6577c8668be96826f17badfb20b92fd828cd17e9fb6617b947379" name="mariadb104-test" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="3a43bffc9c3711715b31095aa700e6ec39506750bc3d47f147e8f71385d691bd" name="mariadb104-test" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="8a2de52035ac50cc761278638770e83013450139b39396b8724721a096c87ba8" name="mariadb104-test" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="c3ef5fb06e61f69c161c4c53f4d63bfad6537408ccaab87d7aa2183bb20e45b4" name="mariadb104-test" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="d909bdad06cd0148cf9a57b4f8cfd2eb9653f528f953a72f7955867d9e9c417a" name="mariadb104-tools" arch="aarch64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="55b97f34d593f5be695ec4d65073b1ca0f6ec5b2f9733577a2640f89a7d1a897" name="mariadb104-tools" arch="ppc64le">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="5e2c8952e3879a035a9c7d199f9710b36d82959202a6e493374749a7a99e92fa" name="mariadb104-tools" arch="s390x">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="dd38e367936e3ed9862dd403fbc75f5999f2e158fef90b86a2d4fa3dd5f5bf57" name="mariadb104-tools" arch="x86_64">
  <version epoch="0" ver="10.4.33" rel="150100.3.8.1"/>
  <changelog author="kstreitova@suse.com" date="1582286400">- disable testing with rpm macros as it does not work as for 10.4,
  needs to be investigated
- remove @VERSION@ from mariadb.service and mariadb@.service</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- test macros: clarify who is admin and user of the database,
  fix build with 10.4
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="kstreitova@suse.com" date="1583755200">- update the list of the skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1590667200">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="kstreitova@suse.com" date="1597924800">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- tune the testsuite to avoid randomly failing tests
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.4.17 [bsc#1177472] and [bsc#1178428]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10417-release-notes
    https://mariadb.com/kb/en/library/mariadb-10417-changelog
    https://mariadb.com/kb/en/library/mariadb-10416-release-notes
    https://mariadb.com/kb/en/library/mariadb-10416-changelog
    https://mariadb.com/kb/en/library/mariadb-10415-release-notes
    https://mariadb.com/kb/en/library/mariadb-10415-changelog
  * fixes for the following security vulnerabilities:
    10.4.17: none
    10.4.16: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.4.15: CVE-2020-15180
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.4.20 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10420-release-notes
    https://mariadb.com/kb/en/library/mariadb-10420-changelog
    https://mariadb.com/kb/en/library/mariadb-10419-release-notes
    https://mariadb.com/kb/en/library/mariadb-10419-changelog
    https://mariadb.com/kb/en/library/mariadb-10418-release-notes
    https://mariadb.com/kb/en/library/mariadb-10418-changelog
  * fixes for the following security vulnerabilities:
    10.4.20: none
    10.4.19: CVE-2021-2154, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.4.18: CVE-2021-27928, bsc#1183770
  * fixes for the following bugs:
    10.4.20: none
    10.4.19: none
    10.4.18: bsc#1182255
- Refresh mariadb-10.1.1-mysqld_multi-features.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628251200">- Increase LimitNOFILE in service file to fix bsc#1180014</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.4.21 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10421-release-notes
    https://mariadb.com/kb/en/library/mariadb-10421-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Add file mysql-user.conf file to let systemd generate mysql user
  in containers. Fixes bsc#1173028
- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636545600">- Update to 10.4.22 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10422-release-notes
    https://mariadb.com/kb/en/library/mariadb-10422-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Add missing dependency to liblz4 to enable lz4 compression
  for INNODB, bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645185600">- Update to 10.4.24 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10424-release-notes
    https://mariadb.com/kb/en/library/mariadb-10424-changelog
    https://mariadb.com/kb/en/library/mariadb-10423-release-notes
    https://mariadb.com/kb/en/library/mariadb-10423-changelog
  * fixes for the following security vulnerabilities:
    10.4.24: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.4.23: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
    CVE-2022-21595
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- Disable building shared libs due to MDEV-27918
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653480000">- Update to 10.4.25 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10425-release-notes
    https://mariadb.com/kb/en/library/mariadb-10425-changelog
  * fixes for the following security vulnerabilities:
    10.4.25: CVE-2021-46669
    CVE-2022-21427
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661515200">- Update to 10.4.26:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10426-release-notes
    https://mariadb.com/kb/en/library/mariadb-10426-changelog
  * fixes for the following security vulnerabilities:
    10.4.26: CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.4.28:
    https://mariadb.com/kb/en/library/mariadb-10428-release-notes
    https://mariadb.com/kb/en/library/mariadb-10428-changelog
    https://mariadb.com/kb/en/library/mariadb-10427-release-notes
    https://mariadb.com/kb/en/library/mariadb-10427-changelog
  * fixes for the following security vulnerabilities:
    10.4.28: none
    10.4.27: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687435200">- Rename package to mariadb104, jsc#PED-2455
- Update to 10.4.30:
    https://mariadb.com/kb/en/library/mariadb-10430-release-notes
    https://mariadb.com/kb/en/library/mariadb-10430-changelog
    https://mariadb.com/kb/en/library/mariadb-10429-release-notes
    https://mariadb.com/kb/en/library/mariadb-10429-changelog
  * fixes for the following security vulnerabilities:
    10.4.30: none
    10.4.29: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707912000">- Update to 10.4.33:
    https://mariadb.com/kb/en/library/mariadb-10-4-33-release-notes
    https://mariadb.com/kb/en/library/mariadb-10-4-33-changelog
    https://mariadb.com/kb/en/library/mariadb-10432-release-notes
    https://mariadb.com/kb/en/library/mariadb-10432-changelog
    https://mariadb.com/kb/en/library/mariadb-10431-release-notes
    https://mariadb.com/kb/en/library/mariadb-10431-changelog
  * fixes for the following security vulnerabilities:
    10.4.33: none
    10.4.32: CVE-2023-22084 (bsc#1217405)
    10.4.31: none
- Refreshed patches:
  * mariadb-10.2.4-fortify-and-O.patch
  * mariadb-10.2.4-logrotate.patch
  * mariadb-10.4.12-fix-install-db.patch
- Update list of skipped tests</changelog>
</package>
<package pkgid="3eddf53f0456e06b5ef4d22e387c45c3d7332edc61e2ebc693176b9afb023444" name="mutter" arch="aarch64">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="61c098e9d801961e719eac79f4863765a94b51433c04e5944fc610352dd79b65" name="mutter" arch="ppc64le">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="4fb5afc99d0d0601a29726a4d6f71692d06ec6be70a241bb171e904b76a7de56" name="mutter" arch="s390x">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="6c70a9c894ec357d828cc624d2ca6db114322b84ad45f010df183f8ded4540f9" name="mutter" arch="src">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="5b72e9d2d537f2cef15639c3ddcb4e9f46203f85dfdcdc4a53c114b9d12dbe41" name="mutter" arch="x86_64">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="156020216ad278b6c21f18bddb4656b26edf885d23a804af3f73319be99733c5" name="mutter-devel" arch="aarch64">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="a9a75322b43708fcdd0e970da1bdef4e03632a5296d18078695071fefcc88e30" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="fd2012fe44dd65935b9c985e491f66d9fb5365c17b5971a403ad062f60760a46" name="mutter-devel" arch="s390x">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="895598dedda6d35cebb58ea78d90bec9ad75f7b0c73b1c203003626924015709" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="4454d3188cd304320b5303c147f49ac98cce9b05f7fcb1f4fd8fbb364534d135" name="mutter-lang" arch="noarch">
  <version epoch="0" ver="45.3" rel="150600.5.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1694001600">- Update to version 45.rc:
  + Fix possible redraw freeze in fullscreen windows
  + Fix restoring focus when leaving the overview
  + Support alpha-composited window screencasts
  + Fix some XWayland windows not getting mapped
  + Fix cursor movement on rotated screens
  + Avoid global lock in stage signals
  + Implemented suspended xdg_toplevel state
  + Support idle_inhibit protocol
  + Do not trigger repick during relayout
  + Fix redraw issue when buffer age is unavailable
  + Add Meta Toolkit (MTK) library
  + Fix possible window freeze during resize operations
  + Fixes to tablet cursor visibility on Wayland
  + Improve support for input capture and emulated input
  + Use headless mode when seat ID is unset
  + Fix unresponsive touchscreen after titlebar drag
  + Fix absolute pointer events on virtual monitor streams
  + Fix disabling CRTCs in disable-only mode updates
  + Cache multi-texture shader snippets
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-fix-clipped-redraw.patch: Fixed upstream.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1694088000">- Replace sysprof-4 with sysprof-6 pkgconfig() BuildRequires to
  follow up the upstream change. And build without the profiler
  feature (using bcond_with profiler), as it's not meant for
  general use.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1694692800">- Add mutter-trap-dpms-errors.patch: Apparently DPMSForceLevel()
  can fail if DPMS is not enabled, so trap errors of DPMS because
  they are not critical and should not block user session.
  (bsc#1215273, glgo#GNOME/mutter!3160)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694865600">- Update to version 45.0:
  + Fix focus-follows-mouse mode
  + Optimize applying relative transformation matrix
  + Add support for P010 YCbCr format
  + Fix hardware cursor stuttering on Raspberry Pi
  + Fix input in multi-monitor remote desktop sessions with libei
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.
- Drop mutter-trap-dpms-errors.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.
- Add pkgconfig(libdisplay-info) BuildRequires and pass
  libdisplay_info=true to meson setup: New optional dependency,
  build libdisplay-info support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696852800">- Drop mutter-crash-meta_context_terminate.patch: Closed upstream
  via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697198400">- Update to version 45.0+45:
  + kms/impl-device/atomic:
  - Fix blob size
  - Fix stack overflow
  + kms/impl-device: Inhibit real-time scheduling when mode setting
  + monitor-manager/native: Update assignments on empty-config too
  + renderer/native:
  - Clear old pending mode sets when unsetting all modes
  - Fold mode unsetting into renamed unset_modes()
  + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority
  + tests/kms/render: Add test for setting empty config
  + thread:
  - Allow turning off rt scheduling for running thread
  - For consistency, s/real_time/realtime/
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 45.0+61:
  + backend:
  - Introduce helpers for turning from/to clutter/evdev buttons
  - Use helper to translate from/to clutter/evdev button codes
  + clutter/frame-clock:
  - Simplify next_presentation_time_us calculation
  - Start next update ASAP after idle period
  + cogl/onscreen: Add missing error untrap calls
  + input-capture:
  - Check barriers don't extend into nonexisting monitors
  - Fix off-by-one for barrier validation
  + renderer/native:
  - Add a new has_addfb2 property
  - Send modifiers even without AddFb2
  + screen-cast/stream-src:
  - Assert that dmabuf handle lookup succeeds
  - Calculate stride after adding handle to hash table
  + tests/clutter/event-delivery: Avoid race with stage update
  + tests/clutter/frame-clock*: Use
    clutter_frame_get_target_presentation_time
  + wayland/dma-buf: Advertise INVALID modifier without AddFb2
  + wayland: Send keyboard modifiers after the enter event
  + input-capture: Add more barrier tests, mostly for invalid
    barriers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698840000">- Update to version 45.1:
  + Fix filtering keybinding events in presence of grabs
  + Fix direct scanout support when using integer scaling
  + Fix capitalization of some keys when caps lock is on
  + Fix vsync regression
  + Fix visibility of software cursors when using direct scanout
  + Fix artifacts at the bottom of some surfaces
  + Discard monitor configs with fractional scale when unusable
  + Apply track point settings
  + xwayland: Enable XDG portal only when not nested
  + Inhibit real-time scheduling when mode setting
  + Don't delay frame updates after idle period
  + Fix running Xwayland in headless setup with nvidia driver
  + wayland: Send keyboard modifiers after the enter event
  + Fixed crashes
  + Misc. bug fixes and cleanups
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 45.2:
  + Disable HW cursor when inhibited by backend.
  + Fix disabling check-alive timeout.
  + Propagate focus appearance to all ancestors.
  + Fix tablets on X11 having the wrong device.
  + Fixed crash.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1702900800">- Add mutter-fix-x11-restart.patch: glgo#GNOME/mutter!2445 breaks
  restarting under x11 accidentally because it redirects subwindows
  after redirecting windows, this patch fix it by redirecting
  subwindows first (glgo#GNOME/gnome-shell#7050,
  glgo#GNOME/mutter!3329).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1703160000">- Add mutter-fix-text-input-delete-surrounding.patch: text-input-v3
  requrires byte based offset but Clutter uses char based offset
  for delete_surrounding_text, fix it by converting before passing
  arguments (glgo#GNOME/mutter#2146, glgo#GNOME/mutter!2712).</changelog>
  <changelog author="dimstar@opensuse.org" date="1704888000">- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706011200">- Rebase mutter-disable-cvt-s390x.patch for mutter 45.x.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1706097600">- mutter-SLE-bsc984738-grab-display.patch:
  * Temporary disable this SLE-only patch as it makes mutter
    45 lock-up on non-CSD apps (bsc#1218935)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1706788800">- Drop mutter-SLE-bsc984738-grab-display.patch: It blocks non-CSD
  apps with GNOME 45, and the latest LTS Oracle Installer works
  fine without it, the original bug is not a problem (bsc#1218935).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1710504000">- Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch:
  This leads into partial update while switching VT (from TTY to
  GNOME) on X11 session with fbdev driver used (
  glgo#GNOME/mutter#3302, bsc#1219546).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1714305600">- Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch:
  Reverting commit 261f516a to fix black screen on Xorg when logging
  in or logging out (glgo#GNOME/mutter#3452 bsc#1222612).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1716292800">- Add mutter-implement-text-input-v1.patch: This allows input
  method to work in Chromium/Electron-based apps with Wayland Ozone
  platform, which only has text-input-v1 support
  (glgo#GNOME/mutter!3751, bsc#1219505).</changelog>
</package>
<package pkgid="6c0795160a9927cfcd4340f434c6f041a9b96bbefd3e57a1c2b202f34d4164a5" name="nscd" arch="aarch64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="cb51f316d9007d45fea0cba57656d200158c5c5a6743b9f06c409fde4838e19e" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="4f21e4924fc58689c41d4382796ff832e3f3b269b6077892508bec9ff7b5ae52" name="nscd" arch="s390x">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="e2b38001d8110a77753a9455ca0a4e07d3a5ce2793a173d551220e74bac9e406" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.5.1"/>
  <changelog author="schwab@suse.de" date="1697544000">- Avoid use of SSE in i586 build</changelog>
  <changelog author="schwab@suse.de" date="1697630400">- dtors-reverse-ctor-order.patch: Remove, has been reverted</changelog>
  <changelog author="schwab@suse.de" date="1698062400">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Remove systemd from shadow and gshadow lookups (bsc#1217220)</changelog>
  <changelog author="schwab@suse.de" date="1701777600">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1704196800">- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is
  expected to exist (BZ #30789)
- ldconfig-process-elf-file.patch: elf: Fix wrong break removal from
  8ee878592c
- tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment
  (BZ #29039)
- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)
- libio-wdo-write.patch: libio: Check remaining buffer size in
  _IO_wdo_write (BZ #31183)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- Split off libnsl.so.1 into a separate package</changelog>
  <changelog author="schwab@suse.de" date="1706529600">- Change minimum GCC to 13</changelog>
  <changelog author="schwab@suse.de" date="1706702400">- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in
  __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780,
  bsc#1218863, bsc#1218867, bsc#1218868)
- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1707307200">- Add libnsl1 to baselibs.conf (bsc#1219640)</changelog>
  <changelog author="schwab@suse.de" date="1708948800">- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
</package>
<package pkgid="16fe438dcde2b98154d1ac332a0f5b2bbe3a5db9d47f428eb81c06581d6c3556" name="objectweb-asm" arch="noarch">
  <version epoch="0" ver="9.7" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local
- cleaned spec using spec-cleaner
- remove "section free" macro
- get rid of %if 0 blocks</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel
- Specify java source and target level 1.6 to allow building with
  jdk9
- Added patch:
  * asm-3.3.1-sourcetarget.patch
    + Don't hardcode the source and target levels, allow specifying
    them on command-line</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Added patch:
  * asm-3.3.1-jdk9.patch
    + Since JDK9, "_" is reserved keyword</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Upgrade to version 6.0, the last version buildable with ant
- Removed patches:
  * asm-3.3.1-jdk9.patch
  * asm-3.3.1-sourcetarget.patch
  * objectweb-asm-no-classpath-in-manifest.patch
    + Not corresponding any more to the current state of code
- Added patches:
  * objectweb-asm-6.0-no_bnd.patch
    + Don't use bnd (which we don't have) to create bundles
  * objectweb-asm-6.0-no_retrofit.patch
    + Don't retrofit bytecode, since we build with target &gt; 1.5
  * objectweb-asm-6.0-sourcetarget.patch
    + Build with source/target 8
  * objectweb-asm-6.0-uberjar.patch
    + Bring back the uberjars (asm-all.jar and asm-debug-all.jar)
    since some packages might still depend on them</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Update RPM groups</changelog>
  <changelog author="fstrba@suse.com" date="1551873600">- Upgrade to version 6.2.1
- Generate and customize the ant build system to be able to build
  without gradle
- Removed patches:
  * objectweb-asm-6.0-no_bnd.patch
  * objectweb-asm-6.0-no_retrofit.patch
  * objectweb-asm-6.0-sourcetarget.patch
  * objectweb-asm-6.0-uberjar.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Upgrade to version 7.2
  * Upstream dropped asm-xml submodule</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Upgrade to version 9.2
  * Up to JDK 18 support
  * ClassReader.readStream() performance improvements
  * Add some input validations in ClassReader
  * Replace -debug flag in Printer with -nodebug (-debug continues
    to work)
  * new V15 constant
  * experimental support for PermittedSubtypes and RecordComponent
  * Javadoc fixes
  * bug fixes
    + 317942: ClassCheckAdaptor output represents reference arrays
    as only their "root" component type
    + 317921: Make Analyzer not require correct maxs or calculate
    maxs fast
    + 317922: InstructionAdapter shall throw consistent exceptions
    + 317923: Incorrect documentation on ClassReader's use of
    AnnotationVisitor
    + 317929: ClassRemapper doesn't remap annotation values
    + 317930: Can CheckClassAdapter.checkTypeRef throw a more
    specific exception?
    + 317931: Shall CheckMethodAdapter.Method.visitLabel throw
    IllegalStateException?
    + Tests that requires preview features should only run if the
    preview features of the right JDK are enabled
    + 317897: AdviceAdapter incorrectly emits onMethodEnter from a
    try-catch block in a constructor
    + 317900: Javadoc of ClassVisitor does not specify order of
    visitRecordComponent
    + 317904: Bug with constructors in AdviceAdapter
    + 317910: Iterating over a InsnList with an iterator traverses
    the list twice
    + 317898: ASM 8 does not support writing of empty records
    + 317896: Performance degradation when using dynamic constants
    as a static paramet to another InDy/ConDy
    + 317885: SKIP_DEBUG now skips MethodParameters attributes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Build asm as modular jar files to be used as such by java &gt;= 9
- Leave asm-all.jar as a non-modular jar</changelog>
  <changelog author="david.anes@suse.com" date="1650456000">- Upgrade to version 9.3
  * new Opcodes.V19 constant for Java 19
  * new size() method in ByteVector
  * checkDataFlow option in CheckClassAdapter can now be used
    without valid maxStack and maxLocals values
  * new Maven BOM
  * bug fixes
    + 317949: fix javadoc errors
    + remap invokedynamic field handles properly
    + add missing left curly brace in ASMifier output of visitModule</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674993600">- Upgrade to version 9.4
  * new Opcodes.V20 constant for Java 20
  * more checks in CheckClassAdapter
  * Javadoc improvements and fixes
  * module-info classes can be built without Gradle and Bnd
  * parent POM updated to org.ow2:ow2:1.5.1
  * bug fixes
    + 317977: CheckClassAdapter is no longer transparent for MAXLOCALS
    + 317981: Add public getDelegate method to all visitor classes
    + Analyzer does not compute optimal maxLocals for static methods
    + Fix SignatureWriter when a generic type has a depth over 30
    + Skip remap inner class name if not changed in Remapper</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Upgrade to version 9.5
  * new Opcodes.V21 constant for Java 21
  * new readBytecodeInstructionOffset hook in ClassReader
  * more detailed exception messages
  * Javadoc improvements and fixes
  * bug fixes
    + 317989: Silent removal of zero-valued entries from the
    line-number table</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Upgrade to version 9.6
  * new Opcodes.V22 constant for Java 22
  * bug fixes
    + 317991: Analyzer produces frames that have different locals
    than those detected by JRE bytecode verifier
    + 317995: Invalid stackmap generated when the instruction
    stream has new instruction after invokespecial to &lt;init&gt;
    + 317998: Analyzer can fail to catch thrown exceptions
    + 318002: asm-analysis Frame allocates an array unnecessarily
    inside executeInvokeInsn
    + bug in CheckFrameAnalyzer with static methods</changelog>
  <changelog author="fstrba@suse.com" date="1715774400">- Upgrade to version 9.7
  * new Opcodes.V23 constant for Java 23
  * bug fixes
    + 318009: Unit test regression in dex2jar.
    + 318007: 'ClassNode#outerClass' has incorrect JavaDocs.
    + 318006: asm-bom packaging should be 'pom'.
    + 318003: The Textifier prints a supplementary space at the end
    of each method that throws at least one exception.</changelog>
</package>
<package pkgid="46dd6bed377c74c50eb1a3c1e56347f6aba8da7f3994bec1087daa01ba8e6778" name="objectweb-asm" arch="src">
  <version epoch="0" ver="9.7" rel="150200.3.15.2"/>
  <changelog author="mvyskocil@suse.cz" date="1243944000">- Initial SUSE packaging of objectweb-asm (from jpp 5.0)</changelog>
  <changelog author="nlminhtl@gmail.com" date="1324209600">- 3.3.1 release
  * added new InstructionAdapter class, TryCatchBlockSorter (provided by Adrian Sampson)
  * improved extensibility of analysis package (patch from Markus Heiden)
  * 314119 Provide read access to uninitializedTypes in AnalyzerAdapter
  * 313804 Improve analysis results
  * a lot of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1380110400">- Build with gcc-java as openjdk7 (1.7.0_40) fails to build it
- Disable javadoc package</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local
- cleaned spec using spec-cleaner
- remove "section free" macro
- get rid of %if 0 blocks</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel
- Specify java source and target level 1.6 to allow building with
  jdk9
- Added patch:
  * asm-3.3.1-sourcetarget.patch
    + Don't hardcode the source and target levels, allow specifying
    them on command-line</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Added patch:
  * asm-3.3.1-jdk9.patch
    + Since JDK9, "_" is reserved keyword</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Upgrade to version 6.0, the last version buildable with ant
- Removed patches:
  * asm-3.3.1-jdk9.patch
  * asm-3.3.1-sourcetarget.patch
  * objectweb-asm-no-classpath-in-manifest.patch
    + Not corresponding any more to the current state of code
- Added patches:
  * objectweb-asm-6.0-no_bnd.patch
    + Don't use bnd (which we don't have) to create bundles
  * objectweb-asm-6.0-no_retrofit.patch
    + Don't retrofit bytecode, since we build with target &gt; 1.5
  * objectweb-asm-6.0-sourcetarget.patch
    + Build with source/target 8
  * objectweb-asm-6.0-uberjar.patch
    + Bring back the uberjars (asm-all.jar and asm-debug-all.jar)
    since some packages might still depend on them</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Update RPM groups</changelog>
  <changelog author="fstrba@suse.com" date="1551873600">- Upgrade to version 6.2.1
- Generate and customize the ant build system to be able to build
  without gradle
- Removed patches:
  * objectweb-asm-6.0-no_bnd.patch
  * objectweb-asm-6.0-no_retrofit.patch
  * objectweb-asm-6.0-sourcetarget.patch
  * objectweb-asm-6.0-uberjar.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Upgrade to version 7.2
  * Upstream dropped asm-xml submodule</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Upgrade to version 9.2
  * Up to JDK 18 support
  * ClassReader.readStream() performance improvements
  * Add some input validations in ClassReader
  * Replace -debug flag in Printer with -nodebug (-debug continues
    to work)
  * new V15 constant
  * experimental support for PermittedSubtypes and RecordComponent
  * Javadoc fixes
  * bug fixes
    + 317942: ClassCheckAdaptor output represents reference arrays
    as only their "root" component type
    + 317921: Make Analyzer not require correct maxs or calculate
    maxs fast
    + 317922: InstructionAdapter shall throw consistent exceptions
    + 317923: Incorrect documentation on ClassReader's use of
    AnnotationVisitor
    + 317929: ClassRemapper doesn't remap annotation values
    + 317930: Can CheckClassAdapter.checkTypeRef throw a more
    specific exception?
    + 317931: Shall CheckMethodAdapter.Method.visitLabel throw
    IllegalStateException?
    + Tests that requires preview features should only run if the
    preview features of the right JDK are enabled
    + 317897: AdviceAdapter incorrectly emits onMethodEnter from a
    try-catch block in a constructor
    + 317900: Javadoc of ClassVisitor does not specify order of
    visitRecordComponent
    + 317904: Bug with constructors in AdviceAdapter
    + 317910: Iterating over a InsnList with an iterator traverses
    the list twice
    + 317898: ASM 8 does not support writing of empty records
    + 317896: Performance degradation when using dynamic constants
    as a static paramet to another InDy/ConDy
    + 317885: SKIP_DEBUG now skips MethodParameters attributes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Build asm as modular jar files to be used as such by java &gt;= 9
- Leave asm-all.jar as a non-modular jar</changelog>
  <changelog author="david.anes@suse.com" date="1650456000">- Upgrade to version 9.3
  * new Opcodes.V19 constant for Java 19
  * new size() method in ByteVector
  * checkDataFlow option in CheckClassAdapter can now be used
    without valid maxStack and maxLocals values
  * new Maven BOM
  * bug fixes
    + 317949: fix javadoc errors
    + remap invokedynamic field handles properly
    + add missing left curly brace in ASMifier output of visitModule</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674993600">- Upgrade to version 9.4
  * new Opcodes.V20 constant for Java 20
  * more checks in CheckClassAdapter
  * Javadoc improvements and fixes
  * module-info classes can be built without Gradle and Bnd
  * parent POM updated to org.ow2:ow2:1.5.1
  * bug fixes
    + 317977: CheckClassAdapter is no longer transparent for MAXLOCALS
    + 317981: Add public getDelegate method to all visitor classes
    + Analyzer does not compute optimal maxLocals for static methods
    + Fix SignatureWriter when a generic type has a depth over 30
    + Skip remap inner class name if not changed in Remapper</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Upgrade to version 9.5
  * new Opcodes.V21 constant for Java 21
  * new readBytecodeInstructionOffset hook in ClassReader
  * more detailed exception messages
  * Javadoc improvements and fixes
  * bug fixes
    + 317989: Silent removal of zero-valued entries from the
    line-number table</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Upgrade to version 9.6
  * new Opcodes.V22 constant for Java 22
  * bug fixes
    + 317991: Analyzer produces frames that have different locals
    than those detected by JRE bytecode verifier
    + 317995: Invalid stackmap generated when the instruction
    stream has new instruction after invokespecial to &lt;init&gt;
    + 317998: Analyzer can fail to catch thrown exceptions
    + 318002: asm-analysis Frame allocates an array unnecessarily
    inside executeInvokeInsn
    + bug in CheckFrameAnalyzer with static methods</changelog>
  <changelog author="fstrba@suse.com" date="1715774400">- Upgrade to version 9.7
  * new Opcodes.V23 constant for Java 23
  * bug fixes
    + 318009: Unit test regression in dex2jar.
    + 318007: 'ClassNode#outerClass' has incorrect JavaDocs.
    + 318006: asm-bom packaging should be 'pom'.
    + 318003: The Textifier prints a supplementary space at the end
    of each method that throws at least one exception.</changelog>
</package>
<package pkgid="805aad5831de7ec4ad3be254175cac5fee473eeffc47fe055132a92bb13ea440" name="objectweb-asm-javadoc" arch="noarch">
  <version epoch="0" ver="9.7" rel="150200.3.15.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local
- cleaned spec using spec-cleaner
- remove "section free" macro
- get rid of %if 0 blocks</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel
- Specify java source and target level 1.6 to allow building with
  jdk9
- Added patch:
  * asm-3.3.1-sourcetarget.patch
    + Don't hardcode the source and target levels, allow specifying
    them on command-line</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Added patch:
  * asm-3.3.1-jdk9.patch
    + Since JDK9, "_" is reserved keyword</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Upgrade to version 6.0, the last version buildable with ant
- Removed patches:
  * asm-3.3.1-jdk9.patch
  * asm-3.3.1-sourcetarget.patch
  * objectweb-asm-no-classpath-in-manifest.patch
    + Not corresponding any more to the current state of code
- Added patches:
  * objectweb-asm-6.0-no_bnd.patch
    + Don't use bnd (which we don't have) to create bundles
  * objectweb-asm-6.0-no_retrofit.patch
    + Don't retrofit bytecode, since we build with target &gt; 1.5
  * objectweb-asm-6.0-sourcetarget.patch
    + Build with source/target 8
  * objectweb-asm-6.0-uberjar.patch
    + Bring back the uberjars (asm-all.jar and asm-debug-all.jar)
    since some packages might still depend on them</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Update RPM groups</changelog>
  <changelog author="fstrba@suse.com" date="1551873600">- Upgrade to version 6.2.1
- Generate and customize the ant build system to be able to build
  without gradle
- Removed patches:
  * objectweb-asm-6.0-no_bnd.patch
  * objectweb-asm-6.0-no_retrofit.patch
  * objectweb-asm-6.0-sourcetarget.patch
  * objectweb-asm-6.0-uberjar.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Upgrade to version 7.2
  * Upstream dropped asm-xml submodule</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Upgrade to version 9.2
  * Up to JDK 18 support
  * ClassReader.readStream() performance improvements
  * Add some input validations in ClassReader
  * Replace -debug flag in Printer with -nodebug (-debug continues
    to work)
  * new V15 constant
  * experimental support for PermittedSubtypes and RecordComponent
  * Javadoc fixes
  * bug fixes
    + 317942: ClassCheckAdaptor output represents reference arrays
    as only their "root" component type
    + 317921: Make Analyzer not require correct maxs or calculate
    maxs fast
    + 317922: InstructionAdapter shall throw consistent exceptions
    + 317923: Incorrect documentation on ClassReader's use of
    AnnotationVisitor
    + 317929: ClassRemapper doesn't remap annotation values
    + 317930: Can CheckClassAdapter.checkTypeRef throw a more
    specific exception?
    + 317931: Shall CheckMethodAdapter.Method.visitLabel throw
    IllegalStateException?
    + Tests that requires preview features should only run if the
    preview features of the right JDK are enabled
    + 317897: AdviceAdapter incorrectly emits onMethodEnter from a
    try-catch block in a constructor
    + 317900: Javadoc of ClassVisitor does not specify order of
    visitRecordComponent
    + 317904: Bug with constructors in AdviceAdapter
    + 317910: Iterating over a InsnList with an iterator traverses
    the list twice
    + 317898: ASM 8 does not support writing of empty records
    + 317896: Performance degradation when using dynamic constants
    as a static paramet to another InDy/ConDy
    + 317885: SKIP_DEBUG now skips MethodParameters attributes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Build asm as modular jar files to be used as such by java &gt;= 9
- Leave asm-all.jar as a non-modular jar</changelog>
  <changelog author="david.anes@suse.com" date="1650456000">- Upgrade to version 9.3
  * new Opcodes.V19 constant for Java 19
  * new size() method in ByteVector
  * checkDataFlow option in CheckClassAdapter can now be used
    without valid maxStack and maxLocals values
  * new Maven BOM
  * bug fixes
    + 317949: fix javadoc errors
    + remap invokedynamic field handles properly
    + add missing left curly brace in ASMifier output of visitModule</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674993600">- Upgrade to version 9.4
  * new Opcodes.V20 constant for Java 20
  * more checks in CheckClassAdapter
  * Javadoc improvements and fixes
  * module-info classes can be built without Gradle and Bnd
  * parent POM updated to org.ow2:ow2:1.5.1
  * bug fixes
    + 317977: CheckClassAdapter is no longer transparent for MAXLOCALS
    + 317981: Add public getDelegate method to all visitor classes
    + Analyzer does not compute optimal maxLocals for static methods
    + Fix SignatureWriter when a generic type has a depth over 30
    + Skip remap inner class name if not changed in Remapper</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Upgrade to version 9.5
  * new Opcodes.V21 constant for Java 21
  * new readBytecodeInstructionOffset hook in ClassReader
  * more detailed exception messages
  * Javadoc improvements and fixes
  * bug fixes
    + 317989: Silent removal of zero-valued entries from the
    line-number table</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Upgrade to version 9.6
  * new Opcodes.V22 constant for Java 22
  * bug fixes
    + 317991: Analyzer produces frames that have different locals
    than those detected by JRE bytecode verifier
    + 317995: Invalid stackmap generated when the instruction
    stream has new instruction after invokespecial to &lt;init&gt;
    + 317998: Analyzer can fail to catch thrown exceptions
    + 318002: asm-analysis Frame allocates an array unnecessarily
    inside executeInvokeInsn
    + bug in CheckFrameAnalyzer with static methods</changelog>
  <changelog author="fstrba@suse.com" date="1715774400">- Upgrade to version 9.7
  * new Opcodes.V23 constant for Java 23
  * bug fixes
    + 318009: Unit test regression in dex2jar.
    + 318007: 'ClassNode#outerClass' has incorrect JavaDocs.
    + 318006: asm-bom packaging should be 'pom'.
    + 318003: The Textifier prints a supplementary space at the end
    of each method that throws at least one exception.</changelog>
</package>
<package pkgid="3d40084dd573dcb91938e1068694a3c288c807022a3430d76afd231bc340e19a" name="obs-service-replace_using_package_version" arch="noarch">
  <version epoch="0" ver="0.0.9" rel="150000.3.9.1"/>
  <changelog author="containers@suse.com" date="1521547200">- Update to version 1521564356.3457a22:
  * Remove makefile
  * Include LICENSE file into the RPM package
  * Update changes log format
  * Add GPLv3 License
  * Improve README
  * check rpm db of installed packages first
  * Adding simple changelog generator
  * Update installation strategy
  * Fix ./setup.py install
  * Adding travis.yml file</changelog>
  <changelog author="containers@suse.com" date="1521547201">- Update to version 1521565666.36ea78a:
  * Minor changes</changelog>
  <changelog author="containers@suse.com" date="1539086400">- Update to version 1539069197.d0e12bd:
  * Bump version: 0.0.1 → 0.0.2
  * Add bumpversion support
  * Add the `--parse-version` flag (fixes bsc#1111089)
  * Add a simple example in README.md
  * Adjusting readme and tests code style</changelog>
  <changelog author="containers@suse.com" date="1561464000">- Update to version 1561476096.079b75f:
  * Bump version: 0.0.2 → 0.0.3
  * new patch_update and offset parameters (bsc#1139343)</changelog>
  <changelog author="containers@suse.com" date="1667995200">- Update to version 1667988064.d72b7ba:
  * Bump version: 0.0.3 → 0.0.4
  * Update obs-service-replace_using_package_version.spec
  * Adapt spec to the current project setup
  * Bump actions/setup-python from 4.1.0 to 4.3.0
  * Bump actions/setup-python from 3 to 4.1.0
  * Bump pytest-cov from 3.0.0 to 4.0.0
  * Bump flake8 from 4.0.1 to 5.0.1
  * Bump tox from 3.25.0 to 3.25.1
  * Bump tox from 3.24.5 to 3.25.0
  * Bump actions/cache from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Bump actions/setup-python from 2 to 3
  * Bump pytest from 7.0.0 to 7.0.1
  * Bump pytest from 6.2.5 to 7.0.0
  * Switch from custom run_command to using check_output
  * Remove additional space from pyproject.toml
  * Replace travis CI badge with GitHub Actions badge
  * Make the file parameter default to the build recipe
  * Add integration tests using pytest_container
  * Bump coverage from 6.3 to 6.3.1
  * Switch from travis-ci to github actions
  * Remove trailing whitespace
  * Switch to poetry instead of using setup.py
  * Correct spelling &amp; gramar in .service
  * Add missing closing description element to .service
  * Follow the python package naming conventions</changelog>
  <changelog author="containers@suse.com" date="1668081600">- Update to version 1668085498.ab6de1e:
  * Bump version: 0.0.4 → 0.0.5
  * Remove the rpm signkeys in the CI environment
  * Adapt tests to mock subprocess.check_output
  * Ignore stderr on successful command executions</changelog>
  <changelog author="containers@suse.com" date="1668081601">- Update to version 1668090256.71deb28:
  * Bump version: 0.0.5 → 0.0.6
  * Link to the official poetry installation guide
  * Update replace_using_package_version.service
  * Update README.md
  * Update README.md
  * Update README.md
  * Update integration_tests/test_version_extraction.py
  * Update replace_using_package_version.service
  * Attempt to read version from obsinfo if no version is found
  * Add Leap 15.4 &amp; SLE 15 SP4 to the CI</changelog>
  <changelog author="containers@suse.com" date="1680177600">- Update to version 1680160876.6dcaef0:
  * Bump version: 0.0.6 → 0.0.7
  * Fix default value for empty or missing version
  * Bump flake8 from 5.0.1 to 5.0.4</changelog>
  <changelog author="containers@suse.com" date="1681214400">- Update to version 1681202780.6d8bb3c:
  * Run unit &amp; install test only for the system python
  * Add python 3.11 tox environment
  * Switch to using rpm.labelCompare instead of parse_version
  * Fix copyright strings
  * Fix test_find_package_version
  * Bump mock from 4.0.3 to 5.0.1
  * Bump pytest-xdist from 2.5.0 to 3.0.2
  * Bump tox from 3.25.1 to 3.28.0
  * Bump Gr1N/setup-poetry from 7 to 8
  * Bump pytest-container from 0.0.2 to 0.1.1
  * Bump actions/setup-python from 4.3.0 to 4.5.0</changelog>
  <changelog author="containers@suse.com" date="1702468800">- Update to version 1702495728.72fe58b:
  * Bump version: 0.0.8 → 0.0.9
  * Bump actions/setup-python from 4.8.0 to 5.0.0
  * Bump actions/setup-python from 4.7.1 to 4.8.0
  * Workaround integration test failures due to PEP 668 marker
  * Bump actions/setup-python from 4.6.1 to 4.7.1
  * Bump actions/checkout from 3 to 4
  * Report the package name that is missing (#56)
  * Bump pytest-container from 0.1.1 to 0.2.0
  * Drop mock dependency, stdlib has it
  * Bump actions/setup-python from 4.6.0 to 4.6.1
  * Bump actions/setup-python from 4.5.0 to 4.6.0
  * Bump version: 0.0.7 → 0.0.8</changelog>
</package>
<package pkgid="c53d013e884176d2e011c7774dfc1f20be249f8216b0093efe8214c3f96cf9ce" name="obs-service-replace_using_package_version" arch="src">
  <version epoch="0" ver="0.0.9" rel="150000.3.9.1"/>
  <changelog author="containers@suse.com" date="1521547200">- Update to version 1521564356.3457a22:
  * Remove makefile
  * Include LICENSE file into the RPM package
  * Update changes log format
  * Add GPLv3 License
  * Improve README
  * check rpm db of installed packages first
  * Adding simple changelog generator
  * Update installation strategy
  * Fix ./setup.py install
  * Adding travis.yml file</changelog>
  <changelog author="containers@suse.com" date="1521547201">- Update to version 1521565666.36ea78a:
  * Minor changes</changelog>
  <changelog author="containers@suse.com" date="1539086400">- Update to version 1539069197.d0e12bd:
  * Bump version: 0.0.1 → 0.0.2
  * Add bumpversion support
  * Add the `--parse-version` flag (fixes bsc#1111089)
  * Add a simple example in README.md
  * Adjusting readme and tests code style</changelog>
  <changelog author="containers@suse.com" date="1561464000">- Update to version 1561476096.079b75f:
  * Bump version: 0.0.2 → 0.0.3
  * new patch_update and offset parameters (bsc#1139343)</changelog>
  <changelog author="containers@suse.com" date="1667995200">- Update to version 1667988064.d72b7ba:
  * Bump version: 0.0.3 → 0.0.4
  * Update obs-service-replace_using_package_version.spec
  * Adapt spec to the current project setup
  * Bump actions/setup-python from 4.1.0 to 4.3.0
  * Bump actions/setup-python from 3 to 4.1.0
  * Bump pytest-cov from 3.0.0 to 4.0.0
  * Bump flake8 from 4.0.1 to 5.0.1
  * Bump tox from 3.25.0 to 3.25.1
  * Bump tox from 3.24.5 to 3.25.0
  * Bump actions/cache from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Bump actions/setup-python from 2 to 3
  * Bump pytest from 7.0.0 to 7.0.1
  * Bump pytest from 6.2.5 to 7.0.0
  * Switch from custom run_command to using check_output
  * Remove additional space from pyproject.toml
  * Replace travis CI badge with GitHub Actions badge
  * Make the file parameter default to the build recipe
  * Add integration tests using pytest_container
  * Bump coverage from 6.3 to 6.3.1
  * Switch from travis-ci to github actions
  * Remove trailing whitespace
  * Switch to poetry instead of using setup.py
  * Correct spelling &amp; gramar in .service
  * Add missing closing description element to .service
  * Follow the python package naming conventions</changelog>
  <changelog author="containers@suse.com" date="1668081600">- Update to version 1668085498.ab6de1e:
  * Bump version: 0.0.4 → 0.0.5
  * Remove the rpm signkeys in the CI environment
  * Adapt tests to mock subprocess.check_output
  * Ignore stderr on successful command executions</changelog>
  <changelog author="containers@suse.com" date="1668081601">- Update to version 1668090256.71deb28:
  * Bump version: 0.0.5 → 0.0.6
  * Link to the official poetry installation guide
  * Update replace_using_package_version.service
  * Update README.md
  * Update README.md
  * Update README.md
  * Update integration_tests/test_version_extraction.py
  * Update replace_using_package_version.service
  * Attempt to read version from obsinfo if no version is found
  * Add Leap 15.4 &amp; SLE 15 SP4 to the CI</changelog>
  <changelog author="containers@suse.com" date="1680177600">- Update to version 1680160876.6dcaef0:
  * Bump version: 0.0.6 → 0.0.7
  * Fix default value for empty or missing version
  * Bump flake8 from 5.0.1 to 5.0.4</changelog>
  <changelog author="containers@suse.com" date="1681214400">- Update to version 1681202780.6d8bb3c:
  * Run unit &amp; install test only for the system python
  * Add python 3.11 tox environment
  * Switch to using rpm.labelCompare instead of parse_version
  * Fix copyright strings
  * Fix test_find_package_version
  * Bump mock from 4.0.3 to 5.0.1
  * Bump pytest-xdist from 2.5.0 to 3.0.2
  * Bump tox from 3.25.1 to 3.28.0
  * Bump Gr1N/setup-poetry from 7 to 8
  * Bump pytest-container from 0.0.2 to 0.1.1
  * Bump actions/setup-python from 4.3.0 to 4.5.0</changelog>
  <changelog author="containers@suse.com" date="1702468800">- Update to version 1702495728.72fe58b:
  * Bump version: 0.0.8 → 0.0.9
  * Bump actions/setup-python from 4.8.0 to 5.0.0
  * Bump actions/setup-python from 4.7.1 to 4.8.0
  * Workaround integration test failures due to PEP 668 marker
  * Bump actions/setup-python from 4.6.1 to 4.7.1
  * Bump actions/checkout from 3 to 4
  * Report the package name that is missing (#56)
  * Bump pytest-container from 0.1.1 to 0.2.0
  * Drop mock dependency, stdlib has it
  * Bump actions/setup-python from 4.6.0 to 4.6.1
  * Bump actions/setup-python from 4.5.0 to 4.6.0
  * Bump version: 0.0.7 → 0.0.8</changelog>
</package>
<package pkgid="4e1c1f08f04518fca129ba2494bab5895ff2a851ecdb03d56025d5c3d0aa7438" name="open-test-reporting" arch="src">
  <version epoch="0" ver="0.1.0~M2" rel="150200.5.7.2"/>
  <changelog author="fstrba@suse.com" date="1714132800">- Initial packaging of version 0.1.0-M2</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
</package>
<package pkgid="17173c036d75fb89ea697046a78defe9c7f8aadf1f4d4d7d202077207ff8d670" name="open-test-reporting-events" arch="noarch">
  <version epoch="0" ver="0.1.0~M2" rel="150200.5.7.2"/>
  <changelog author="fstrba@suse.com" date="1714132800">- Initial packaging of version 0.1.0-M2</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
</package>
<package pkgid="29a161afe0111fc663959196ac7e7013e26d2782498d8d36c8fb9bbdb40e9172" name="open-test-reporting-schema" arch="noarch">
  <version epoch="0" ver="0.1.0~M2" rel="150200.5.7.2"/>
  <changelog author="fstrba@suse.com" date="1714132800">- Initial packaging of version 0.1.0-M2</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8</changelog>
</package>
<package pkgid="12e63b7a94614d39f8d86162d415db94060b713977dfa09be925f5ad9f51438e" name="osc" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="150400.10.3.1"/>
  <changelog author="daniel.mach@suse.com" date="1678795200">- 1.0.0
  - Revert "Remove the '-A' option from the 'maintainer' command"
  - core.get_request_list: Remove deprecation warning
  - meta attribute: Add --add option to append values to the existing list
  - Replace arbitrary XML escaping code with xml_escape()
  - build: New option 'disable_hdrmd5_check' to ignore hdrmd5 mismatches
  - commit: Pass --force down to delete_package</changelog>
  <changelog author="daniel.mach@suse.com" date="1678795201">- 1.0.0 (full changelog to the latest stable version 0.182.0)
  - Command-line:
  - Use '.' as a wildcard that resolves to a project or a package name from the current working copy, for example 'osc rdiff ./. -c &lt;num&gt;'
  - Add 'create-pbuild-config' (cpc) command
  - Add '--disable-build' option to the 'branch' command
  - Add '--disable-build' option to the 'linkpac' command
  - Add '-X/--extra-pkgs-from' option to the 'build' command
  - Add '--add' option to the 'meta' command that appends new values to the existing values
  - Replace '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Replace '--debug' option in the 'getbinaries' command with '--debuginfo' to avoid conflicts with the global '--debug'
  - Replace '--verbose' option in the 'build' command with '--verbose-mode' to avoid conflicts with the global '--verbose'
  - Replace '--version' option with 'version' command
  - Enable forwarding requests to the parent projects in 'rq list -i' and 'sr accept' commands
  - Make use of '-M/--multibuild' option consistent across the commands
  - Enhance '--force' option in the 'commit' command to allow deleting packages even if other packages depend on them
  - Print URLs and xpaths in the debug rather than the verbose mode
  - Fix 'add' command for github /archive/ URLs
  - Fix 'buildhistory' command to produce proper output using build_table() and a CSV writer
  - Fix 'linkpac' command to avoid copying a lock from a locked package to the target package
  - Fix 'setlinkrev' command to write a log message on setting a revision
  - Fix 'submitrequest' command not to error out on using an alias to apiurl
  - Fix 'update' command on project level for scm packages
  - Fix '--mine' option in the 'request' command to show only requests created by the user
  - Fix the documentation url in the 'maintenancerequest' and 'createincident' commands
  - Remove '--skip-validation' option from the 'commit' command
  - Remove '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' subcommands from the 'submitrequest' command
  - Remove '--seperate-requests' option from the 'submitrequest' command
  - Remove '--raw' option from the 'develproject' command
  - Remove '--maintained' option from the 'search' command
  - Remove 'deleteprj' command
  - Remove 'deletepac' command
  - Remove 'editmeta' command
  - Remove 'results_meta' command
  - Remove 'rlog' command
  - Remove 'rprjresults' command
  - Remove 'rresults' command
  - Configuration:
  - Add 'project_separator' config option
  - Add 'disable_hdrmd5_check' config option to ignore hdrmd5 mismatches
  - Remove 'plaintext_passwd' config option
  - Library:
  - Add Store class that will replace store_{read,write}* functions
  - Remove 'GnomeKeyringCredentialsManager' and related code
  - Remove Request.get_creator() method
  - Replace unmaintained cmdln.py with a custom code based on argparse
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Drop Python 2 support, Python 3.6 is the lowest supported version
  - Code cleanups, following PEP 8 and the latest best practices now
  - Improve handling of hdrmd5 mismatches
  - Handle uncompressed Debian packages
  - Replace arbitrary XML escaping code with xml_escape()
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Fix manual run of source service
  - Connection:
  - Switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - Warn when using HTTP connection, make HTTPS the default
  - Send HTTP header Accept: application/xml
  - Wait between retries
  - Authentication:
  - Support signature (ssh) auth including ssh-agent forwarding
  - Lock cookiejar to prevent unnecessary signature auth by waiting for a session cookie
  - Print user and apiurl when prompting for a password
  - Fix a crash when deleting a password
  - Known issues:
  - Commandline option values cannot start with '-', for example: osc build -x -vim
    Background: This is a limitation of underlying Python's argparse
    How to fix: Use '=' to join the option with its value: osc build -x=-vim
    URL: https://github.com/openSUSE/osc/issues/1227
  - Commandline positional arguments no longer recognize '/' as a universal argument separator
    Background: This is an attempt to bring some consistency into argument parsing, reducing number of separators and value combinations
    How to fix: Separate &lt;project&gt;/&lt;package&gt; from &lt;repo&gt;/&lt;arch&gt; with a space
    URL: https://github.com/openSUSE/osc/issues/1272</changelog>
  <changelog author="daniel.mach@suse.com" date="1679054400">- 1.0.1
  - Configuration:
  - Fix a cut&amp;paste error in setting 'disable_hdrmd5_check' config option
  - Connection:
  - Set Content-Type of POST requests without data to 'application/x-www-form-urlencoded'</changelog>
  <changelog author="daniel.mach@suse.com" date="1680523200">- 1.1.0
  - Command-line:
  - New class-based commands
  - Sort commands before printing help
  - No longer read plugins from /var/lib/osc-plugins
  - Configuration:
  - Do not error out on setting oscrc permissions if the file is owned by another user
  - Library:
  - Restore 'include_request_from_project' conf option functionality
  - Simplify how babysitter works with options and config
  - Prefer f-strings over c-style string expansion</changelog>
  <changelog author="daniel.mach@suse.com" date="1681214400">- 1.1.1
  - Command-line:
  - Fix 'creq' command that wasn't working at all
  - Fix 'ls' command when listing all projects by setting project argument to '/'
  - Fix regression: Run interactive config setup on missing config or credentials
  - Append plugin dirs to sys.path to allow loading modules installed next to the plugins
  - Do not recurse into subdirs when loading plugins
  - Configuration:
  - Display apiurl when asking for a username or a password
  - If apiurl is not set in interactive_config_setup(), use apiurl from DEFAULTS
  - Library:
  - Decode entities in HTTPError message body</changelog>
  <changelog author="daniel.mach@suse.com" date="1683115200">- 1.1.2
  - Command-line:
  - Add '--buildtool-opt' option passing options to underlying rpmbuild to the 'build' command
  - Fix 'diff' command to support diffing selected files only
  - Identify inherited packages in the 'dependson' command output
  - Bring the '--debug' option back to the 'buildinfo' command
  - Fix 'buildhistory' command by setting the type of the '--limit' option to int
  - Library:
  - Fix a traceback when failed to unlock a keyring
  - Don't retry on 400 HTTP status code in core.server_diff()
  - Clean-up the '.old' folder if an exception happens
  - Document 'popt' attribute in the _link template
  - Fix build.get_repo() to return only directory that contains 'repodata/repomd.xml'
  - Connection:
  - Retry on receiving the following HTTP status codes: 400, 500, 502, 503, 504
  - Allow disabling retry on 400 HTTP status code
  - Fix urlgrab to skip mirrors with invalid scheme</changelog>
  <changelog author="daniel.mach@suse.com" date="1683720000">- 1.1.3
  - Command-line:
  - Backup edited messages and notify user about them when osc errors out
  - Consider only open requests when listing requests with a given review state
  - Fix 'diff' command when no files are specified
  - Configuration:
  - Add glob support to the 'trusted_prj' config option
  - Library:
  - Fix core.xmlindent() to work with ElementTree objects</changelog>
  <changelog author="daniel.mach@suse.com" date="1684929600">- 1.1.4
  - Command-line:
  - Change 'review list' command to display open requests (state: new, review, declined)
  - Fix running osc in an AppImage by switching to the correct working directory
  - Handle ProtocolError exception
  - Library:
  - Add 'req_states' parameter to osc.core.get_review_list()
  - Connection:
  - Fix grabber to work with old urllib3 versions that do not contain URLSchemeUnknown exception</changelog>
  <changelog author="daniel.mach@suse.com" date="1689336000">- 1.2.0
  - Command-line:
  - Add 'repo' command and subcommands for managing repositories in project meta
  - Extend 'browse' command to open requests in a web browser
  - Add highlighting for 'osc diff' and similar commands
  - Fix 'api' command to stream output to avoid running out of memory
  - Fix printing utf-8 characters to stdout
  - Connection:
  - Fix ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled
  - Authentication:
  - Correctly handle passwords with utf-8 characters
  - Library:
  - Fix crash when submiting a SCM package which has no _link
  - Fix local service execution of scmsync packages
  - Detect target package by its full name, instead of assuming its origin is identical to the source package type
  - Other:
  - Spell openSUSE correctly</changelog>
  <changelog author="daniel.mach@suse.com" date="1691582400">- 1.3.0
  - Command-line:
  - Add experimental support of Git SCM to the 'build' command
  - Add experimental support of Git SCM to the 'service' command
  - Make 'meta' command capable of editing attributes
  - Change '--add' option in 'meta attribute' command to skip duplicate values
  - Add an interactive option to display build log in 'request list -i' command
  - Add '--setopt' option for setting config options from the command-line
  - Fix '--prefer-pkgs' option for noinstall="1" packages in kiwi builds
  - Change 'checkout' command to print open requests only when running in an interactive terminal
  - Enhance '--force' option description in the 'request' command
  - Connection:
  - Fix crash when HTTP_PROXY env contains no auth
  - Library:
  - Add 'git_scm' module for handling packages that live in git scm rather than usual obs scm
  - Change pop_project_package_from_args() to use get_store() to support Git SCM
  - Change osc.build module to use 'store' object instead of calling core.store_*() functions
  - Use alternative project if specified in parse_repoarchdescr()
  - Fix xml indent() on Python 3.6
  - Fix less pager by adding '-R' to LESS env
  - Improve print_msg() and migrate some arbitrary prints to it</changelog>
  <changelog author="daniel.mach@suse.com" date="1693224000">- 1.3.1
  - Command-line:
  - Fix string + int concatenation errors in 'build' command by using f-strings instead
  - Fix '--all' option in 'rebuild' command
  - Fix 'build' command when '--alternative-project' option is specified and the git branch cannot be mapped to a project
  - Stop suggesting that the working directory is git/mercurial/svn/cvs
  - Be helpful in deprecating commands
  - Configuration:
  - Add more config options among integer options
  - Library:
  - Fix GitStore to error out properly if there is no 'origin' remote in the git repo
  - print_buildlog: Remove control characters from build log before printing (CVE-2012-1095)</changelog>
  <changelog author="daniel.mach@suse.com" date="1696420800">- 1.4.0
  - Command-line:
  - Add rootless build support to 'build' command for 'kvm' and 'podman' vm types
  - Print a hint to clean the build root after a failed build
  - Avoid adding a newline to prompt in 'wipe' command
  - Fix 'build' command to pass '--vm-type' option to the underlying build tool
  - Add '--just-print-buildroot' option to print build root path and exit to 'build' command
  - Add support for keep_packages_locked on request revoke
  - Import zsh completition made by Holger Macht and improve it
  - Use XDG locations in completion
  - Fix 'search' command to resolve '-B .' to the current project
  - Add '-M/--multibuild-package' option to 'checkconstraints' command
  - Allow constraints file with remote request in 'checkconstraints' command
  - Unify how the 'commit' and 'build' commands work with '--noservice' option
  - Fix 'request show' command to print superseded_by information
  - Fix 'service' command to support already documented 'r' abbreviation for 'run'
  - Configuration:
  - Implement 'exclude_files' and 'include_files' config options that allow skipping files in the 'checkout' command
  - Fix api_host_options for custom CAs (cafile and capath options work again)
  - Switch 'osc.conf.config' from dict to Options class with type checking
  - Rename conf.Options.build_type to vm_type to be consistent with obs build and osc --vm-type option
  - Update list of supported vm_type values in conf.Options.vm_type
  - Remove any duplicated code loading configuration from ENV
  - Library:
  - Add 'osc.util.models' module implementing an alternative pydantic-like data validation
  - Add 'osc.util.xdg' module for handling XDG paths
  - Fix handling empty vm_type in Store.last_buildroot
  - Spec:
  - Install zsh completion
  - Build and install oscrc man page</changelog>
  <changelog author="daniel.mach@suse.com" date="1696939200">- 1.4.1
  - Configuration:
  - Always display apiurl when asking for credentials
  - Ask for new credentials when user is missing from an apiurl section in the config file
  - Library:
  - Fix testing revision for being empty
  - Fix core.change_request_state_template() to always return a string
  - Tests:
  - Replace 'git init -b' with 'git init' and 'git checkout -b'
  - Spec:
  - Run fdupes after install
  - List the python sitelib paths explicitly
  - Mark csh completion files as configs
  - Own zsh completion dirs to mute rpmlint errors
  - Move bash completion from /etc to /usr/share</changelog>
  <changelog author="daniel.mach@suse.com" date="1697457600">- 1.4.2
  - Command-line:
  - Change NoPBTextMeter to display no output at all
  - Fix retrieving the configured user in 'user' command
  - Configuration:
  - Restore 'passx' host option that contains an obfuscated password
  - Fix retrieving a password in case a function returns another callable
  - Fix retrieving config values in core.vc_export_env()</changelog>
  <changelog author="daniel.mach@suse.com" date="1697716800">- 1.4.3
  - Configuration:
  - Allow undefined fields in Options and HostOptions</changelog>
  <changelog author="jslaby@suse.cz" date="1698148800">- fix bash completion suffix (.bash instead of .sh) (bsc#1216531)</changelog>
  <changelog author="daniel.mach@suse.com" date="1698926400">- 1.4.4
  - Command-line:
  - Fix autocompletion for new locations
  - Configuration:
  - Fix apiurl_aliases handling in OscOptions.__getitem__
  - Fix crash when there's no [general]/apiurl option in the config file</changelog>
  <changelog author="daniel.mach@suse.com" date="1700654400">- 1.5.0
  - Command-line:
  - Change 'rdiff' command to display diff for _project if no package is specified
  - Update 'build' command with initial support for 'productcompose' build type
  - Change 'build' command to disable preinstall images in rootless builds
  - Configuration:
  - Fix conf.write_initial_config() to use read_file() instead of deprecated readfp()
  - Other:
  - Support installing osc into virtualenv
  - Spec:
  - Recommend 'build' on openSUSE/SLE and 'obs-build' on all other distros</changelog>
  <changelog author="m.lewis-smith@warwick.ac.uk" date="1701691200">- specfile change : use rhel version macros wherever 'fedora' macro is also used
  + Build manpages on RHEL distros where argparse-manpage is available
    and where python3-sphinx is available and cleanly installable without
    requiring environment(modules) from EPEL
  + use fdupes to deduplicate python bytecode on RHEL distros which support it</changelog>
  <changelog author="daniel.mach@suse.com" date="1701691201">- 1.5.1
  - Library:
  - Avoid using '/public/' API routes
  - Update 'osc.util.models' to avoid including lazy defaults in the rendered man pages
  - Spec:
  - Simplify distro-specific macros
  - Use %{?rhel} macros</changelog>
</package>
<package pkgid="a347e3163bd41fb093d34de4274fa800d4670925fbf7c63a0ba23147008792dc" name="osc" arch="src">
  <version epoch="0" ver="1.5.1" rel="150400.10.3.1"/>
  <changelog author="daniel.mach@suse.com" date="1678795200">- 1.0.0
  - Revert "Remove the '-A' option from the 'maintainer' command"
  - core.get_request_list: Remove deprecation warning
  - meta attribute: Add --add option to append values to the existing list
  - Replace arbitrary XML escaping code with xml_escape()
  - build: New option 'disable_hdrmd5_check' to ignore hdrmd5 mismatches
  - commit: Pass --force down to delete_package</changelog>
  <changelog author="daniel.mach@suse.com" date="1678795201">- 1.0.0 (full changelog to the latest stable version 0.182.0)
  - Command-line:
  - Use '.' as a wildcard that resolves to a project or a package name from the current working copy, for example 'osc rdiff ./. -c &lt;num&gt;'
  - Add 'create-pbuild-config' (cpc) command
  - Add '--disable-build' option to the 'branch' command
  - Add '--disable-build' option to the 'linkpac' command
  - Add '-X/--extra-pkgs-from' option to the 'build' command
  - Add '--add' option to the 'meta' command that appends new values to the existing values
  - Replace '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Replace '--debug' option in the 'getbinaries' command with '--debuginfo' to avoid conflicts with the global '--debug'
  - Replace '--verbose' option in the 'build' command with '--verbose-mode' to avoid conflicts with the global '--verbose'
  - Replace '--version' option with 'version' command
  - Enable forwarding requests to the parent projects in 'rq list -i' and 'sr accept' commands
  - Make use of '-M/--multibuild' option consistent across the commands
  - Enhance '--force' option in the 'commit' command to allow deleting packages even if other packages depend on them
  - Print URLs and xpaths in the debug rather than the verbose mode
  - Fix 'add' command for github /archive/ URLs
  - Fix 'buildhistory' command to produce proper output using build_table() and a CSV writer
  - Fix 'linkpac' command to avoid copying a lock from a locked package to the target package
  - Fix 'setlinkrev' command to write a log message on setting a revision
  - Fix 'submitrequest' command not to error out on using an alias to apiurl
  - Fix 'update' command on project level for scm packages
  - Fix '--mine' option in the 'request' command to show only requests created by the user
  - Fix the documentation url in the 'maintenancerequest' and 'createincident' commands
  - Remove '--skip-validation' option from the 'commit' command
  - Remove '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' subcommands from the 'submitrequest' command
  - Remove '--seperate-requests' option from the 'submitrequest' command
  - Remove '--raw' option from the 'develproject' command
  - Remove '--maintained' option from the 'search' command
  - Remove 'deleteprj' command
  - Remove 'deletepac' command
  - Remove 'editmeta' command
  - Remove 'results_meta' command
  - Remove 'rlog' command
  - Remove 'rprjresults' command
  - Remove 'rresults' command
  - Configuration:
  - Add 'project_separator' config option
  - Add 'disable_hdrmd5_check' config option to ignore hdrmd5 mismatches
  - Remove 'plaintext_passwd' config option
  - Library:
  - Add Store class that will replace store_{read,write}* functions
  - Remove 'GnomeKeyringCredentialsManager' and related code
  - Remove Request.get_creator() method
  - Replace unmaintained cmdln.py with a custom code based on argparse
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Drop Python 2 support, Python 3.6 is the lowest supported version
  - Code cleanups, following PEP 8 and the latest best practices now
  - Improve handling of hdrmd5 mismatches
  - Handle uncompressed Debian packages
  - Replace arbitrary XML escaping code with xml_escape()
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Fix manual run of source service
  - Connection:
  - Switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - Warn when using HTTP connection, make HTTPS the default
  - Send HTTP header Accept: application/xml
  - Wait between retries
  - Authentication:
  - Support signature (ssh) auth including ssh-agent forwarding
  - Lock cookiejar to prevent unnecessary signature auth by waiting for a session cookie
  - Print user and apiurl when prompting for a password
  - Fix a crash when deleting a password
  - Known issues:
  - Commandline option values cannot start with '-', for example: osc build -x -vim
    Background: This is a limitation of underlying Python's argparse
    How to fix: Use '=' to join the option with its value: osc build -x=-vim
    URL: https://github.com/openSUSE/osc/issues/1227
  - Commandline positional arguments no longer recognize '/' as a universal argument separator
    Background: This is an attempt to bring some consistency into argument parsing, reducing number of separators and value combinations
    How to fix: Separate &lt;project&gt;/&lt;package&gt; from &lt;repo&gt;/&lt;arch&gt; with a space
    URL: https://github.com/openSUSE/osc/issues/1272</changelog>
  <changelog author="daniel.mach@suse.com" date="1679054400">- 1.0.1
  - Configuration:
  - Fix a cut&amp;paste error in setting 'disable_hdrmd5_check' config option
  - Connection:
  - Set Content-Type of POST requests without data to 'application/x-www-form-urlencoded'</changelog>
  <changelog author="daniel.mach@suse.com" date="1680523200">- 1.1.0
  - Command-line:
  - New class-based commands
  - Sort commands before printing help
  - No longer read plugins from /var/lib/osc-plugins
  - Configuration:
  - Do not error out on setting oscrc permissions if the file is owned by another user
  - Library:
  - Restore 'include_request_from_project' conf option functionality
  - Simplify how babysitter works with options and config
  - Prefer f-strings over c-style string expansion</changelog>
  <changelog author="daniel.mach@suse.com" date="1681214400">- 1.1.1
  - Command-line:
  - Fix 'creq' command that wasn't working at all
  - Fix 'ls' command when listing all projects by setting project argument to '/'
  - Fix regression: Run interactive config setup on missing config or credentials
  - Append plugin dirs to sys.path to allow loading modules installed next to the plugins
  - Do not recurse into subdirs when loading plugins
  - Configuration:
  - Display apiurl when asking for a username or a password
  - If apiurl is not set in interactive_config_setup(), use apiurl from DEFAULTS
  - Library:
  - Decode entities in HTTPError message body</changelog>
  <changelog author="daniel.mach@suse.com" date="1683115200">- 1.1.2
  - Command-line:
  - Add '--buildtool-opt' option passing options to underlying rpmbuild to the 'build' command
  - Fix 'diff' command to support diffing selected files only
  - Identify inherited packages in the 'dependson' command output
  - Bring the '--debug' option back to the 'buildinfo' command
  - Fix 'buildhistory' command by setting the type of the '--limit' option to int
  - Library:
  - Fix a traceback when failed to unlock a keyring
  - Don't retry on 400 HTTP status code in core.server_diff()
  - Clean-up the '.old' folder if an exception happens
  - Document 'popt' attribute in the _link template
  - Fix build.get_repo() to return only directory that contains 'repodata/repomd.xml'
  - Connection:
  - Retry on receiving the following HTTP status codes: 400, 500, 502, 503, 504
  - Allow disabling retry on 400 HTTP status code
  - Fix urlgrab to skip mirrors with invalid scheme</changelog>
  <changelog author="daniel.mach@suse.com" date="1683720000">- 1.1.3
  - Command-line:
  - Backup edited messages and notify user about them when osc errors out
  - Consider only open requests when listing requests with a given review state
  - Fix 'diff' command when no files are specified
  - Configuration:
  - Add glob support to the 'trusted_prj' config option
  - Library:
  - Fix core.xmlindent() to work with ElementTree objects</changelog>
  <changelog author="daniel.mach@suse.com" date="1684929600">- 1.1.4
  - Command-line:
  - Change 'review list' command to display open requests (state: new, review, declined)
  - Fix running osc in an AppImage by switching to the correct working directory
  - Handle ProtocolError exception
  - Library:
  - Add 'req_states' parameter to osc.core.get_review_list()
  - Connection:
  - Fix grabber to work with old urllib3 versions that do not contain URLSchemeUnknown exception</changelog>
  <changelog author="daniel.mach@suse.com" date="1689336000">- 1.2.0
  - Command-line:
  - Add 'repo' command and subcommands for managing repositories in project meta
  - Extend 'browse' command to open requests in a web browser
  - Add highlighting for 'osc diff' and similar commands
  - Fix 'api' command to stream output to avoid running out of memory
  - Fix printing utf-8 characters to stdout
  - Connection:
  - Fix ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled
  - Authentication:
  - Correctly handle passwords with utf-8 characters
  - Library:
  - Fix crash when submiting a SCM package which has no _link
  - Fix local service execution of scmsync packages
  - Detect target package by its full name, instead of assuming its origin is identical to the source package type
  - Other:
  - Spell openSUSE correctly</changelog>
  <changelog author="daniel.mach@suse.com" date="1691582400">- 1.3.0
  - Command-line:
  - Add experimental support of Git SCM to the 'build' command
  - Add experimental support of Git SCM to the 'service' command
  - Make 'meta' command capable of editing attributes
  - Change '--add' option in 'meta attribute' command to skip duplicate values
  - Add an interactive option to display build log in 'request list -i' command
  - Add '--setopt' option for setting config options from the command-line
  - Fix '--prefer-pkgs' option for noinstall="1" packages in kiwi builds
  - Change 'checkout' command to print open requests only when running in an interactive terminal
  - Enhance '--force' option description in the 'request' command
  - Connection:
  - Fix crash when HTTP_PROXY env contains no auth
  - Library:
  - Add 'git_scm' module for handling packages that live in git scm rather than usual obs scm
  - Change pop_project_package_from_args() to use get_store() to support Git SCM
  - Change osc.build module to use 'store' object instead of calling core.store_*() functions
  - Use alternative project if specified in parse_repoarchdescr()
  - Fix xml indent() on Python 3.6
  - Fix less pager by adding '-R' to LESS env
  - Improve print_msg() and migrate some arbitrary prints to it</changelog>
  <changelog author="daniel.mach@suse.com" date="1693224000">- 1.3.1
  - Command-line:
  - Fix string + int concatenation errors in 'build' command by using f-strings instead
  - Fix '--all' option in 'rebuild' command
  - Fix 'build' command when '--alternative-project' option is specified and the git branch cannot be mapped to a project
  - Stop suggesting that the working directory is git/mercurial/svn/cvs
  - Be helpful in deprecating commands
  - Configuration:
  - Add more config options among integer options
  - Library:
  - Fix GitStore to error out properly if there is no 'origin' remote in the git repo
  - print_buildlog: Remove control characters from build log before printing (CVE-2012-1095)</changelog>
  <changelog author="daniel.mach@suse.com" date="1696420800">- 1.4.0
  - Command-line:
  - Add rootless build support to 'build' command for 'kvm' and 'podman' vm types
  - Print a hint to clean the build root after a failed build
  - Avoid adding a newline to prompt in 'wipe' command
  - Fix 'build' command to pass '--vm-type' option to the underlying build tool
  - Add '--just-print-buildroot' option to print build root path and exit to 'build' command
  - Add support for keep_packages_locked on request revoke
  - Import zsh completition made by Holger Macht and improve it
  - Use XDG locations in completion
  - Fix 'search' command to resolve '-B .' to the current project
  - Add '-M/--multibuild-package' option to 'checkconstraints' command
  - Allow constraints file with remote request in 'checkconstraints' command
  - Unify how the 'commit' and 'build' commands work with '--noservice' option
  - Fix 'request show' command to print superseded_by information
  - Fix 'service' command to support already documented 'r' abbreviation for 'run'
  - Configuration:
  - Implement 'exclude_files' and 'include_files' config options that allow skipping files in the 'checkout' command
  - Fix api_host_options for custom CAs (cafile and capath options work again)
  - Switch 'osc.conf.config' from dict to Options class with type checking
  - Rename conf.Options.build_type to vm_type to be consistent with obs build and osc --vm-type option
  - Update list of supported vm_type values in conf.Options.vm_type
  - Remove any duplicated code loading configuration from ENV
  - Library:
  - Add 'osc.util.models' module implementing an alternative pydantic-like data validation
  - Add 'osc.util.xdg' module for handling XDG paths
  - Fix handling empty vm_type in Store.last_buildroot
  - Spec:
  - Install zsh completion
  - Build and install oscrc man page</changelog>
  <changelog author="daniel.mach@suse.com" date="1696939200">- 1.4.1
  - Configuration:
  - Always display apiurl when asking for credentials
  - Ask for new credentials when user is missing from an apiurl section in the config file
  - Library:
  - Fix testing revision for being empty
  - Fix core.change_request_state_template() to always return a string
  - Tests:
  - Replace 'git init -b' with 'git init' and 'git checkout -b'
  - Spec:
  - Run fdupes after install
  - List the python sitelib paths explicitly
  - Mark csh completion files as configs
  - Own zsh completion dirs to mute rpmlint errors
  - Move bash completion from /etc to /usr/share</changelog>
  <changelog author="daniel.mach@suse.com" date="1697457600">- 1.4.2
  - Command-line:
  - Change NoPBTextMeter to display no output at all
  - Fix retrieving the configured user in 'user' command
  - Configuration:
  - Restore 'passx' host option that contains an obfuscated password
  - Fix retrieving a password in case a function returns another callable
  - Fix retrieving config values in core.vc_export_env()</changelog>
  <changelog author="daniel.mach@suse.com" date="1697716800">- 1.4.3
  - Configuration:
  - Allow undefined fields in Options and HostOptions</changelog>
  <changelog author="jslaby@suse.cz" date="1698148800">- fix bash completion suffix (.bash instead of .sh) (bsc#1216531)</changelog>
  <changelog author="daniel.mach@suse.com" date="1698926400">- 1.4.4
  - Command-line:
  - Fix autocompletion for new locations
  - Configuration:
  - Fix apiurl_aliases handling in OscOptions.__getitem__
  - Fix crash when there's no [general]/apiurl option in the config file</changelog>
  <changelog author="daniel.mach@suse.com" date="1700654400">- 1.5.0
  - Command-line:
  - Change 'rdiff' command to display diff for _project if no package is specified
  - Update 'build' command with initial support for 'productcompose' build type
  - Change 'build' command to disable preinstall images in rootless builds
  - Configuration:
  - Fix conf.write_initial_config() to use read_file() instead of deprecated readfp()
  - Other:
  - Support installing osc into virtualenv
  - Spec:
  - Recommend 'build' on openSUSE/SLE and 'obs-build' on all other distros</changelog>
  <changelog author="m.lewis-smith@warwick.ac.uk" date="1701691200">- specfile change : use rhel version macros wherever 'fedora' macro is also used
  + Build manpages on RHEL distros where argparse-manpage is available
    and where python3-sphinx is available and cleanly installable without
    requiring environment(modules) from EPEL
  + use fdupes to deduplicate python bytecode on RHEL distros which support it</changelog>
  <changelog author="daniel.mach@suse.com" date="1701691201">- 1.5.1
  - Library:
  - Avoid using '/public/' API routes
  - Update 'osc.util.models' to avoid including lazy defaults in the rendered man pages
  - Spec:
  - Simplify distro-specific macros
  - Use %{?rhel} macros</changelog>
</package>
<package pkgid="dfab08d70b184bc4cf6b3b6f335a341406dd73b8e957cb3ada9caf9a95b1d712" name="patterns-wsl" arch="src">
  <version epoch="0" ver="20240327" rel="150400.3.11.1"/>
  <changelog author="scott.bradnick@suse.com" date="1641988800">- Initial version.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642161600">- Adding missing 'patterns-wsl-rpmlintrc' as Source to specfile.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642248000">- Removing 'patterns-wsl-rpmlintrc' since it was just a commented entry
  and seems to be causing bot issues in IBS.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1645531200">- Adding lato-fonts as 'Requires' package for wsl_gui.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1664452800">- Adding a patterns-wsl-systemd &lt;-&gt; wsl_systemd pattern to setup 2 things:
  * /sbin/init -&gt; /usr/lib/systemd/systemd symlink (if it doesn't exist)
  * backup an existing /etc/wsl.conf ; drop in new /etc/wsl.conf with
    boot.systemd=true entry.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1666267200">- Moving 'xeyes' from a "Requires" to "Recommends" for wsl_gui pattern</changelog>
  <changelog author="scott.bradnick@suse.com" date="1670328000">- Update to version 20221206
  * Updating wsl_systemd to comment out 'LoadCredential=*' for 5 systemd
    units:
  * systemd-tmpfiles-setup.service
  * systemd-tmpfiles-setup-dev.service
  * systemd-sysctl.service
  * systemd-tmpfiles-clean.service
  * systemd-sysusers.service</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671192000">- Update to version 20221216
  * Undoing LoadCredential changes since it's NOT what was breaking WSLg
    integration
  * Adjusing %post code for edits to %{_sysconfdir}/wsl.conf for:
  * wsl_base
  * wsl_gui
  * wsl_systemd</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451200">- Update to version 20221219
  * Adjusting wsl_systemd %post to remove ping_group_range from wsl.conf
    when systemd is being enabled.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451201">- Adding [wsl_base,gui,systemd] tags for echo output
- Changing %post to %pre as there seems to be a problem when
  50-check-installtest runs as %post</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671537600">- Update to version 20221220
  * Reworked to avoid build race condition where it seemed like there was
    an issue during 50-check-installtest and what happens with
    "testing for pre/postinstall scripts that are not idempotent"
  * Adding true %post section</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624000">- Update to version 20221221
  * Improved tests for [boot] section when 'command=.*$' is present so
    as to not clobber existing commands for wsl_base &amp; wsl_gui
  * wsl_systemd should clear ping_group_range if present and retain any
    existing commands</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624001">- Adjusting how $PREEXISTING_COMMANDS is fed into the while loop for
  wsl_systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1700136000">- Replace systemd BuildRequires with pkgconfig(systemd): Allow OBS
  to shortcut through systemd-mini.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711108800">- Update to version 20240322
  * Adding scriptlet code to create %{_tmpfilesdir}/wslg.conf iff
    it doesn't exist
  - This should take care of missing /tmp/.X11-unix symlink after
    the wsl_systemd pattern is installed, so it works 'out-of-the-box'</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711540800">- Adjusting %{_tmpfilesdir}/wslg.conf to be provided by a new package
  named patterns-wsl-tmpfiles which is required by patterns-wsl-systemd
  * WSL uses '/etc/zypp/zypp.conf:solver.onlyRequires = true' by default</changelog>
</package>
<package pkgid="2ae572cc87bc46b31f8c2f16e94150a895ed64ab86612b4f31e54f96e15b0517" name="patterns-wsl-base" arch="noarch">
  <version epoch="0" ver="20240327" rel="150400.3.11.1"/>
  <changelog author="scott.bradnick@suse.com" date="1641988800">- Initial version.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642161600">- Adding missing 'patterns-wsl-rpmlintrc' as Source to specfile.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642248000">- Removing 'patterns-wsl-rpmlintrc' since it was just a commented entry
  and seems to be causing bot issues in IBS.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1645531200">- Adding lato-fonts as 'Requires' package for wsl_gui.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1664452800">- Adding a patterns-wsl-systemd &lt;-&gt; wsl_systemd pattern to setup 2 things:
  * /sbin/init -&gt; /usr/lib/systemd/systemd symlink (if it doesn't exist)
  * backup an existing /etc/wsl.conf ; drop in new /etc/wsl.conf with
    boot.systemd=true entry.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1666267200">- Moving 'xeyes' from a "Requires" to "Recommends" for wsl_gui pattern</changelog>
  <changelog author="scott.bradnick@suse.com" date="1670328000">- Update to version 20221206
  * Updating wsl_systemd to comment out 'LoadCredential=*' for 5 systemd
    units:
  * systemd-tmpfiles-setup.service
  * systemd-tmpfiles-setup-dev.service
  * systemd-sysctl.service
  * systemd-tmpfiles-clean.service
  * systemd-sysusers.service</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671192000">- Update to version 20221216
  * Undoing LoadCredential changes since it's NOT what was breaking WSLg
    integration
  * Adjusing %post code for edits to %{_sysconfdir}/wsl.conf for:
  * wsl_base
  * wsl_gui
  * wsl_systemd</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451200">- Update to version 20221219
  * Adjusting wsl_systemd %post to remove ping_group_range from wsl.conf
    when systemd is being enabled.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451201">- Adding [wsl_base,gui,systemd] tags for echo output
- Changing %post to %pre as there seems to be a problem when
  50-check-installtest runs as %post</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671537600">- Update to version 20221220
  * Reworked to avoid build race condition where it seemed like there was
    an issue during 50-check-installtest and what happens with
    "testing for pre/postinstall scripts that are not idempotent"
  * Adding true %post section</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624000">- Update to version 20221221
  * Improved tests for [boot] section when 'command=.*$' is present so
    as to not clobber existing commands for wsl_base &amp; wsl_gui
  * wsl_systemd should clear ping_group_range if present and retain any
    existing commands</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624001">- Adjusting how $PREEXISTING_COMMANDS is fed into the while loop for
  wsl_systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1700136000">- Replace systemd BuildRequires with pkgconfig(systemd): Allow OBS
  to shortcut through systemd-mini.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711108800">- Update to version 20240322
  * Adding scriptlet code to create %{_tmpfilesdir}/wslg.conf iff
    it doesn't exist
  - This should take care of missing /tmp/.X11-unix symlink after
    the wsl_systemd pattern is installed, so it works 'out-of-the-box'</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711540800">- Adjusting %{_tmpfilesdir}/wslg.conf to be provided by a new package
  named patterns-wsl-tmpfiles which is required by patterns-wsl-systemd
  * WSL uses '/etc/zypp/zypp.conf:solver.onlyRequires = true' by default</changelog>
</package>
<package pkgid="07d81c51dea38b7e4d78e508f3f65d833c780c64dbe977e57dfb25b345e5e621" name="patterns-wsl-gui" arch="noarch">
  <version epoch="0" ver="20240327" rel="150400.3.11.1"/>
  <changelog author="scott.bradnick@suse.com" date="1641988800">- Initial version.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642161600">- Adding missing 'patterns-wsl-rpmlintrc' as Source to specfile.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642248000">- Removing 'patterns-wsl-rpmlintrc' since it was just a commented entry
  and seems to be causing bot issues in IBS.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1645531200">- Adding lato-fonts as 'Requires' package for wsl_gui.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1664452800">- Adding a patterns-wsl-systemd &lt;-&gt; wsl_systemd pattern to setup 2 things:
  * /sbin/init -&gt; /usr/lib/systemd/systemd symlink (if it doesn't exist)
  * backup an existing /etc/wsl.conf ; drop in new /etc/wsl.conf with
    boot.systemd=true entry.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1666267200">- Moving 'xeyes' from a "Requires" to "Recommends" for wsl_gui pattern</changelog>
  <changelog author="scott.bradnick@suse.com" date="1670328000">- Update to version 20221206
  * Updating wsl_systemd to comment out 'LoadCredential=*' for 5 systemd
    units:
  * systemd-tmpfiles-setup.service
  * systemd-tmpfiles-setup-dev.service
  * systemd-sysctl.service
  * systemd-tmpfiles-clean.service
  * systemd-sysusers.service</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671192000">- Update to version 20221216
  * Undoing LoadCredential changes since it's NOT what was breaking WSLg
    integration
  * Adjusing %post code for edits to %{_sysconfdir}/wsl.conf for:
  * wsl_base
  * wsl_gui
  * wsl_systemd</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451200">- Update to version 20221219
  * Adjusting wsl_systemd %post to remove ping_group_range from wsl.conf
    when systemd is being enabled.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451201">- Adding [wsl_base,gui,systemd] tags for echo output
- Changing %post to %pre as there seems to be a problem when
  50-check-installtest runs as %post</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671537600">- Update to version 20221220
  * Reworked to avoid build race condition where it seemed like there was
    an issue during 50-check-installtest and what happens with
    "testing for pre/postinstall scripts that are not idempotent"
  * Adding true %post section</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624000">- Update to version 20221221
  * Improved tests for [boot] section when 'command=.*$' is present so
    as to not clobber existing commands for wsl_base &amp; wsl_gui
  * wsl_systemd should clear ping_group_range if present and retain any
    existing commands</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624001">- Adjusting how $PREEXISTING_COMMANDS is fed into the while loop for
  wsl_systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1700136000">- Replace systemd BuildRequires with pkgconfig(systemd): Allow OBS
  to shortcut through systemd-mini.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711108800">- Update to version 20240322
  * Adding scriptlet code to create %{_tmpfilesdir}/wslg.conf iff
    it doesn't exist
  - This should take care of missing /tmp/.X11-unix symlink after
    the wsl_systemd pattern is installed, so it works 'out-of-the-box'</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711540800">- Adjusting %{_tmpfilesdir}/wslg.conf to be provided by a new package
  named patterns-wsl-tmpfiles which is required by patterns-wsl-systemd
  * WSL uses '/etc/zypp/zypp.conf:solver.onlyRequires = true' by default</changelog>
</package>
<package pkgid="621cd8995b66a2e145d4828753a8adbf7dede96419b2bdb1e95098b9e346369e" name="patterns-wsl-systemd" arch="noarch">
  <version epoch="0" ver="20240327" rel="150400.3.11.1"/>
  <changelog author="scott.bradnick@suse.com" date="1641988800">- Initial version.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642161600">- Adding missing 'patterns-wsl-rpmlintrc' as Source to specfile.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642248000">- Removing 'patterns-wsl-rpmlintrc' since it was just a commented entry
  and seems to be causing bot issues in IBS.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1645531200">- Adding lato-fonts as 'Requires' package for wsl_gui.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1664452800">- Adding a patterns-wsl-systemd &lt;-&gt; wsl_systemd pattern to setup 2 things:
  * /sbin/init -&gt; /usr/lib/systemd/systemd symlink (if it doesn't exist)
  * backup an existing /etc/wsl.conf ; drop in new /etc/wsl.conf with
    boot.systemd=true entry.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1666267200">- Moving 'xeyes' from a "Requires" to "Recommends" for wsl_gui pattern</changelog>
  <changelog author="scott.bradnick@suse.com" date="1670328000">- Update to version 20221206
  * Updating wsl_systemd to comment out 'LoadCredential=*' for 5 systemd
    units:
  * systemd-tmpfiles-setup.service
  * systemd-tmpfiles-setup-dev.service
  * systemd-sysctl.service
  * systemd-tmpfiles-clean.service
  * systemd-sysusers.service</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671192000">- Update to version 20221216
  * Undoing LoadCredential changes since it's NOT what was breaking WSLg
    integration
  * Adjusing %post code for edits to %{_sysconfdir}/wsl.conf for:
  * wsl_base
  * wsl_gui
  * wsl_systemd</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451200">- Update to version 20221219
  * Adjusting wsl_systemd %post to remove ping_group_range from wsl.conf
    when systemd is being enabled.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451201">- Adding [wsl_base,gui,systemd] tags for echo output
- Changing %post to %pre as there seems to be a problem when
  50-check-installtest runs as %post</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671537600">- Update to version 20221220
  * Reworked to avoid build race condition where it seemed like there was
    an issue during 50-check-installtest and what happens with
    "testing for pre/postinstall scripts that are not idempotent"
  * Adding true %post section</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624000">- Update to version 20221221
  * Improved tests for [boot] section when 'command=.*$' is present so
    as to not clobber existing commands for wsl_base &amp; wsl_gui
  * wsl_systemd should clear ping_group_range if present and retain any
    existing commands</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624001">- Adjusting how $PREEXISTING_COMMANDS is fed into the while loop for
  wsl_systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1700136000">- Replace systemd BuildRequires with pkgconfig(systemd): Allow OBS
  to shortcut through systemd-mini.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711108800">- Update to version 20240322
  * Adding scriptlet code to create %{_tmpfilesdir}/wslg.conf iff
    it doesn't exist
  - This should take care of missing /tmp/.X11-unix symlink after
    the wsl_systemd pattern is installed, so it works 'out-of-the-box'</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711540800">- Adjusting %{_tmpfilesdir}/wslg.conf to be provided by a new package
  named patterns-wsl-tmpfiles which is required by patterns-wsl-systemd
  * WSL uses '/etc/zypp/zypp.conf:solver.onlyRequires = true' by default</changelog>
</package>
<package pkgid="b84f17292bc33faa283e623032639e46ae4e0450c3cfb608a5edc937fac6186f" name="patterns-wsl-tmpfiles" arch="noarch">
  <version epoch="0" ver="20240327" rel="150400.3.11.1"/>
  <changelog author="scott.bradnick@suse.com" date="1641988800">- Initial version.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642161600">- Adding missing 'patterns-wsl-rpmlintrc' as Source to specfile.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1642248000">- Removing 'patterns-wsl-rpmlintrc' since it was just a commented entry
  and seems to be causing bot issues in IBS.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1645531200">- Adding lato-fonts as 'Requires' package for wsl_gui.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1664452800">- Adding a patterns-wsl-systemd &lt;-&gt; wsl_systemd pattern to setup 2 things:
  * /sbin/init -&gt; /usr/lib/systemd/systemd symlink (if it doesn't exist)
  * backup an existing /etc/wsl.conf ; drop in new /etc/wsl.conf with
    boot.systemd=true entry.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1666267200">- Moving 'xeyes' from a "Requires" to "Recommends" for wsl_gui pattern</changelog>
  <changelog author="scott.bradnick@suse.com" date="1670328000">- Update to version 20221206
  * Updating wsl_systemd to comment out 'LoadCredential=*' for 5 systemd
    units:
  * systemd-tmpfiles-setup.service
  * systemd-tmpfiles-setup-dev.service
  * systemd-sysctl.service
  * systemd-tmpfiles-clean.service
  * systemd-sysusers.service</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671192000">- Update to version 20221216
  * Undoing LoadCredential changes since it's NOT what was breaking WSLg
    integration
  * Adjusing %post code for edits to %{_sysconfdir}/wsl.conf for:
  * wsl_base
  * wsl_gui
  * wsl_systemd</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451200">- Update to version 20221219
  * Adjusting wsl_systemd %post to remove ping_group_range from wsl.conf
    when systemd is being enabled.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671451201">- Adding [wsl_base,gui,systemd] tags for echo output
- Changing %post to %pre as there seems to be a problem when
  50-check-installtest runs as %post</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671537600">- Update to version 20221220
  * Reworked to avoid build race condition where it seemed like there was
    an issue during 50-check-installtest and what happens with
    "testing for pre/postinstall scripts that are not idempotent"
  * Adding true %post section</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624000">- Update to version 20221221
  * Improved tests for [boot] section when 'command=.*$' is present so
    as to not clobber existing commands for wsl_base &amp; wsl_gui
  * wsl_systemd should clear ping_group_range if present and retain any
    existing commands</changelog>
  <changelog author="scott.bradnick@suse.com" date="1671624001">- Adjusting how $PREEXISTING_COMMANDS is fed into the while loop for
  wsl_systemd</changelog>
  <changelog author="dimstar@opensuse.org" date="1700136000">- Replace systemd BuildRequires with pkgconfig(systemd): Allow OBS
  to shortcut through systemd-mini.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711108800">- Update to version 20240322
  * Adding scriptlet code to create %{_tmpfilesdir}/wslg.conf iff
    it doesn't exist
  - This should take care of missing /tmp/.X11-unix symlink after
    the wsl_systemd pattern is installed, so it works 'out-of-the-box'</changelog>
  <changelog author="scott.bradnick@suse.com" date="1711540800">- Adjusting %{_tmpfilesdir}/wslg.conf to be provided by a new package
  named patterns-wsl-tmpfiles which is required by patterns-wsl-systemd
  * WSL uses '/etc/zypp/zypp.conf:solver.onlyRequires = true' by default</changelog>
</package>
<package pkgid="194ae547f40df834defa56b89b7455f2cc6deb4fa6345693d7c708330dc061d5" name="perl-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="c98cec4be17fdb37d3421e8360d6ebe489e644f6a9983a9e7caf7f8ee0fdaee2" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="76d297a087105a53eaee66e8d33e58e764a2c364e7e78b791d7117d2f87ba0c9" name="perl" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="aa3758af54b02ae7cf9403206f713d46f5573afcfb0a7c37c94e55c23f904b37" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="2be4ddcc0886c07fafb1027e82c27b8ea5a58aced9b6d0a3a593c7e8fc33c025" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="8e081b0dd9971b4e8e32f3fd559eb11f0cb57ca6f861329c5f871e7673b0783d" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="31659de944a29d9c33d43340e8aefd05e380ec94daaa6a60294fba95d1499476" name="perl-DBD-SQLite" arch="aarch64">
  <version epoch="0" ver="1.66" rel="150300.3.12.1"/>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 1.46
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.46 2014-12-10
  - Switched to a production version. (ISHIGAKI)
  1.45_06 2014-11-26
  - Silenced a compile-time warning (Unescaped left brace
    in regex is deprecated) in PerlData virtual table
    under bleadperl
  1.45_05 2014-11-25
  - Updated to SQLite 3.8.7.2
  - Restored regexp support in PerlData virtual table
    by secure reimplementation using closure (DAMI++)
  1.45_04 2014-10-28
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Changed to apply quotemeta() to parameters while building
    a query for a virtual table using PerlData for security.
    (RIBASUSHI++ and MAUKE++) (DAMI, ISHIGAKI)
  1.45_03 2014-10-25
  - Fixed regression of 0 as integer (ISHIGAKI)
  1.45_02 2014-10-23
  - Improved int overflow handling under 32bit strawberry perl
    (ISHIGAKI)
  1.45_01 2014-10-22
  - Updated to SQLite 3.8.7 (ISHIGAKI)
  - Resolved #76395 (hopefully): int values over 32 bit in length
    produce an error "datatype mismatch" (ISHIGAKI)
  1.44 2014-10-22
  - Switched to a production version. (ISHIGAKI)
  1.43_09 2014-10-20
  - Resolved #99583: Legacy DOS 8.3 filename support incompatible
    with SQLITE WAL journal mode (spotted by Pat Horton) (ISHIGAKI)
  - 1.43_07/08 were not VC6 compatible (ISHIGAKI)
  1.43_08 2014-08-21
  - Updated to SQLite 3.8.6, which should fix a unique index
    issue: see http://www.sqlite.org/src/info/9a6daf340df99ba93c
    for details (ISHIGAKI)
  1.43_07 2014-07-30
  - Resolved #97598: Crash on disconnect with virtual tables (FTS4)
    (patch and test code by Rob++) (ISHIGAKI)
  1.43_06 2014-07-22
  - Fixed compile error/warning for older perls (reported by ribasushi)
    (ISHIGAKI)
  1.43_05 2014-07-21
  - No significant code changes; removed unnecessary dependencies.
  1.43_04 2014-07-21
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #96877: sql statements should be converted to utf8 (DAMI)
    If you set sqlite_unicode to true, SQL statements will be upgraded
    to avoid inconsistency between embedded params and bind params.
  - Resolved #96494: [PATCH] add SYSTEM TABLE to table_info() type
    list (MJP)
  - Supported virtual tables in Perl, and added two sample tables
    (DAMI++)
  1.43_03 2014-06-12
  - Updated to SQLite 3.8.5, which should fix query planner's
    issues in SQLite (ISHIGAKI)
  - Fixed busy_timeout to accept 0 to disable (reported by zdm)
    (ISHIGAKI)
  - Resolved #95511: primary_key_info fails to return names for
    named primary keys (Kenneth Kroenlein)
  - Resolved #96050: Segfault in disconnected sqlite_db_filename
    (reported by Alex Vandiver) (ISHIGAKI)
  1.43_02 2014-03-26
  - Limited -std=gnu99 to solaris gcc only, though it may be
    harmless in many cases (mattp++) (ISHIGAKI)
  1.43_01 2014-03-26
  - Added -std=gnu99 for solaris gcc users (reported by mattp++)
    (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.48 2015-06-12
  - Switched to a production version. (ISHIGAKI)
  1.47_05 2015-05-08
  - Updated to SQLite 3.8.10
  1.47_04 2015-05-02
  - Used MY_CXT instead of a global variable
  1.47_03 2015-04-16
  - Added :all to EXPORT_TAGS in ::Constants
  1.47_02 2015-04-16
  - Updated to SQLite 3.8.9
  - Added DBD::SQLite::Constants, from which you can import any
    "useful" constants into your applications.
  - Removed previous Cygwin hack as SQLite 3.8.9 compiles well again
  - Now create_function/aggregate accepts an extra bit
    (SQLITE_DETERMINISTIC) for better performance.
  1.47_01 2015-02-17
  * ** (EXPERIMENTAL) CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Commented OPTIMIZE out of WriteMakefile (RT #94207).
    If your perl is not compiled with -O2, your DBD::SQLite may
    possibly behave differently under some circumstances.
    (This release is to find notable examples from CPAN Testers).
  - Set THREADSAFE to 0 under Cygwin to cope with an upstream
    regression since 3.8.7 (GH #7).
  - Updated to SQLite 3.8.8.2
  - Resolved #35449: Fast DBH-&gt;do (ptushnik, ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1455364800">- updated to 1.50
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.50 2016-02-11
  - Switched to a production version.
  1.49_08 2016-01-30
  - no significant code changes
  - Resolved RT#111558: Virtual table tests depend on enhanced
    query syntax availability (vlmarek++)
  - Ingore FTS tests if FTS is not available
  1.49_07 2016-01-21
  - Updated to SQLite 3.10.2, which fixed a case-folding bug
    in the LIKE operator introduced in SQLite 3.10.0.
  1.49_06 2016-01-15
  - Updated to SQLite 3.10.1, which fixed an old bug that could
    generate incorrect results when a scalar subquery attempts
    to use the block sorting optimization.
  1.49_05 2016-01-11
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.10.0.
    Because of the addition of LIKE/GLOB/REGEXP support on
    virtual tables, previous ::PerlData virtual table got broken.
    This is hopefully fixed by adding strlike/strglob functions
    to DBD::SQLite but if you use this virtual table, please
    test it carefully.
  - Now you can make a database connection read-only if you
    turn on the ReadOnly attribute when you connect. (RT #110439)
    If you set it after you connect to a database, DBD::SQLite
    warns because the database doesn't actually become read-only.
  - Improved ::Constants
  - to load DBD::SQLite by itself
  - to expose SQLITE_VERSION_NUMBER
  - introduced a few new (shorter) tags
  1.49_04 2015-11-24
  - Updated ::Constants
  - Fixed a sqlite version number in a test (GH-14; NANIS++)
  1.49_03 2015-11-05
  - Updated to SQLite 3.9.2, with JSON support
  1.49_02 2015-10-10
  - Added a workaround to resolve #106950 Extra warnings
    with savepoints (hopefully)
  - Not to run tests for table_column_metadata unless
    ENABLE_COLUMN_METADATA is set
  1.49_01 2015-08-04
  - Updated to SQLite 3.8.11.1
  - Resolved #106151 SAVEPOINT bug
  - Made sure to keep what's left in unprepared_statements when
    allow_multiple_statements is set. (GH #11)</changelog>
  <changelog author="coolo@suse.com" date="1479297600">- updated to 1.52
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.52 2016-11-15
  - Switched to a production version.
  1.51_07 2016-10-16
  - Downgraded SQLite to 3.13.0 (RT#118395)
  1.51_06 2016-10-15
  - Updated SQLite to 3.15.0
  1.51_05 2016-06-23
  - Updated SQLite to 3.13.0
  - Resolved #115465: column_info doesn't parse sizes with spaces
    (ilmari++)
  - Added two missing function declarations (rurban++)
  1.51_04 2016-03-07
  - Updated SQLite to 3.11.1, which fixed an FTS5 index
    corruption issue
  1.51_03 2016-02-20
  - No code change
  - Resolved #112220: t/62_regexp_multibyte_char_class.t fails
    for perl &gt;= 5.22.0 and non-utf8 locale (SREZIC++)
  1.51_02 2016-02-20
  - No code change; fixed a newly added test that only passed
    under recent perls (&gt;= 5.18)
  1.51_01 2016-02-20
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.11.0.
    As upstream disabled two-arg fts3_tokenizer() for security concern,
    DBD::SQLite also stopped enabling it by default. If you do need
    perl tokenizer, compile/install with SQLITE_ENABLE_FTS3_TOKENIZER
    environmental variable.
  - Applied a doc patch by Salvatore Bonaccorso
  - Enabled (experimental) FTS5
  - Fixed REGEXP function to work under sqlite_unicode correctly
    (András Farkas++)</changelog>
  <changelog author="coolo@suse.com" date="1482667200">- updated to 1.54
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.54 2016-12-24
  - Switched to a production version.
  - Resolved RT#119219: Trivial documentation bug in DBL::SQLite 1.52
  1.53_01 2016-11-26
  - Re-enabled perl tokenizer by calling sqlite_db_config
    if SQLite &gt;= 3.12</changelog>
  <changelog author="coolo@suse.com" date="1519905600">- updated to 1.56
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.56 2018-02-28
  - Switched to a production version.
  1.55_07 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Upgraded SQLite to 3.22.0
  - Disabled two STAT compile time options (tentatively),
    which fixes RT-124227 anyway
  1.55_06 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Downgraded SQLite to 3.19.3 because of a SQLite regression
    (RT-124227, ribasushi++)
  - Fixed some tests to adapt to a change in error format
    introduced by the latest DBI
  - Remove no warnings test from t/43_fts.t which failed under
    some environments
  1.55_05 2017-12-16
  - Implemented ParamValues statement handle attribute (RT-123886)
  1.55_04 2017-11-22
  - Updated SQLite to 3.21.0
  - Resolved #122581: statistics_info() doesn't work correctly
    (John Deighan)
  - Fixed typo (GH#26, ReneNyffenegger)
  - Silenced some warnings (GH#25, Jacques Germishuys)
  - Fixed no dot in @INC issue (GH#24, ribasushi)
  - Fixed zero-length BLOB value is retrieved as undef
    (GH#23, SATO Kentaro)
  - Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
    (GH#28, fschlich)
  - noted on sqlite_extended_result_codes handle attribute
  1.55_03 2017-02-14
  - Updated SQLite to 3.17.0
  1.55_02 2017-01-08
  - Updated SQLite to 3.16.2
  - Fixed statistics_info when only unique indexes were requested (Dave
    Rolsky++). GitHub #21
  1.55_01 2017-01-04
  - Updated SQLite to 3.16.0</changelog>
  <changelog author="coolo@suse.com" date="1522324800">- updated to 1.58
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.58 2018-03-28
  - Switched to a production version.
  1.57_01 2018-03-21
  - Made it an error to fetch attributes from a statement
    handle whose database handle is inactive (ribasushi++)</changelog>
  <changelog author="coolo@suse.com" date="1544097600">- updated to 1.60
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.60 2018-12-01
  - Switched to a production version
  1.59_03 2018-11-03
  - Added a note on the long standing bug on TYPE statement
    handle attribute
  - Applied a doc patch on Virtual::PerlData by Björn Höhrmann
    (GH-31)
  1.59_02 2018-09-30
  - Upgraded SQLite to 3.25.2
  1.59_01 2018-09-17
  - Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
    and UPSERT among others
  - Added ::GetInfo (GH#32, Brendan Byrd)
  - Fix to use a PV value as a virtual table column value
    where appropriate (RT-124941)
  - Add deferrability to foreign_key_info (mohawk2)</changelog>
  <changelog author="coolo@suse.com" date="1546084800">- updated to 1.62
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.62 2018-12-29
  - Switched to a production version
  1.61_04 2018-12-22
  - Added sqlite_db_config method and new constants for it
  - Added sqlite_defensive option to disallow dangerous SQLite features
  - Exposed some of the hidden extended result codes
  1.61_03 2018-12-19
  - Upgraded SQLite to 3.26.0, which reportedly has a security fix
  1.61_02 2018-12-01
  - Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  - Introduced sqlite_prefer_numeric_type database handle attribute
    that changes the value of TYPE statement handle attribute
    from an array of string to an array of integer, as an experimental
    feature. Setting this may break your applications.
  - Changed preferred bugtracker
  1.61_01 2018-12-01
  - Added ability to configure SQLITE_MAX_LENGT with environmental
    variable (Roy Storey)
  - Added sqlite_limit database handle method to change run-time limits
  - Upgraded SQLite to 3.25.3
  - Updated constants</changelog>
  <changelog author="coolo@suse.com" date="1565697600">- updated to 1.64
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.64 2019-08-12
  - Switched to a production version
  1.63_05 2019-07-12
  - Upgraded SQLite to 3.29.0
  - Added sqlite_get_autocommit private method (GH#52)
  - Addded new db_config constants, notably to prohibit
    double-quoted string literals
  1.63_04 2019-05-25
  - Upgraded SQLite to 3.28.0
  - Modified doc for sqlite_db_filename which actually returns undef
    or an empty string (GH#50)
  - Fixed -&gt;quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)
  1.63_03 2019-02-15
  - Applied a patch to fix segmentation fault on 32-bit big-endian
    platforms by Niko Tyni (GH#45)
  1.63_02 2019-02-14
  - Upgraded SQLite to 3.27.1
  - Let a URI filename test skip if SQLite is compiled with URI filename
    support (GH#47)
  1.63_01 2019-01-26
  - Made sure an internal hv is initialized (GH#45)
  - Fixed a number of tests to skip
  - Bumped up Test::More requirement
  - Replaced bundled Test::NoWarnings with Test::FailWarnings
  - Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)</changelog>
  <changelog author="timueller+perl@suse.de" date="1598875200">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.66 2020-08-30
  - Switched to a production version
  1.65_03 2020-07-27
  - Upgraded SQLite to 3.32.3
  1.65_02 2020-02-08
  - Upgraded SQLite to 3.31.1
  1.65_01 2020-01-18
  - Upgraded SQLite to 3.30.1
  - Added several SQL_ types as alias (pali++)
  - Fixed two initialization issues (ppisar++)
  - Allowed create_function to return an array reference
    to specify the type of the value</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000000">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000001">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000002">- Use external sqlite3 library rather than internal code.
  [bsc#1195771, perl-DBD-SQLite-use-external-sqlite3.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1664280000">- Fixed a test failed comparing Lowercase type data. Patch created from
  github repo commit: ba4f472e7372dbf453444c7764d1c342e7af12b8
  [bsc#1203742, 0001-bsc-1203442-lowercase-test.patch}</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715860800">- Remove sqlite files when building with system libraries
  * Avoiding having wrong sqlite version when checking with the perl module
    [bsc#1218946]</changelog>
</package>
<package pkgid="7586bb34490aae7e63eb8b95daa4dabfa25e0f1bdd10ca8651c8fe22fc843a87" name="perl-DBD-SQLite" arch="ppc64le">
  <version epoch="0" ver="1.66" rel="150300.3.12.1"/>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 1.46
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.46 2014-12-10
  - Switched to a production version. (ISHIGAKI)
  1.45_06 2014-11-26
  - Silenced a compile-time warning (Unescaped left brace
    in regex is deprecated) in PerlData virtual table
    under bleadperl
  1.45_05 2014-11-25
  - Updated to SQLite 3.8.7.2
  - Restored regexp support in PerlData virtual table
    by secure reimplementation using closure (DAMI++)
  1.45_04 2014-10-28
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Changed to apply quotemeta() to parameters while building
    a query for a virtual table using PerlData for security.
    (RIBASUSHI++ and MAUKE++) (DAMI, ISHIGAKI)
  1.45_03 2014-10-25
  - Fixed regression of 0 as integer (ISHIGAKI)
  1.45_02 2014-10-23
  - Improved int overflow handling under 32bit strawberry perl
    (ISHIGAKI)
  1.45_01 2014-10-22
  - Updated to SQLite 3.8.7 (ISHIGAKI)
  - Resolved #76395 (hopefully): int values over 32 bit in length
    produce an error "datatype mismatch" (ISHIGAKI)
  1.44 2014-10-22
  - Switched to a production version. (ISHIGAKI)
  1.43_09 2014-10-20
  - Resolved #99583: Legacy DOS 8.3 filename support incompatible
    with SQLITE WAL journal mode (spotted by Pat Horton) (ISHIGAKI)
  - 1.43_07/08 were not VC6 compatible (ISHIGAKI)
  1.43_08 2014-08-21
  - Updated to SQLite 3.8.6, which should fix a unique index
    issue: see http://www.sqlite.org/src/info/9a6daf340df99ba93c
    for details (ISHIGAKI)
  1.43_07 2014-07-30
  - Resolved #97598: Crash on disconnect with virtual tables (FTS4)
    (patch and test code by Rob++) (ISHIGAKI)
  1.43_06 2014-07-22
  - Fixed compile error/warning for older perls (reported by ribasushi)
    (ISHIGAKI)
  1.43_05 2014-07-21
  - No significant code changes; removed unnecessary dependencies.
  1.43_04 2014-07-21
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #96877: sql statements should be converted to utf8 (DAMI)
    If you set sqlite_unicode to true, SQL statements will be upgraded
    to avoid inconsistency between embedded params and bind params.
  - Resolved #96494: [PATCH] add SYSTEM TABLE to table_info() type
    list (MJP)
  - Supported virtual tables in Perl, and added two sample tables
    (DAMI++)
  1.43_03 2014-06-12
  - Updated to SQLite 3.8.5, which should fix query planner's
    issues in SQLite (ISHIGAKI)
  - Fixed busy_timeout to accept 0 to disable (reported by zdm)
    (ISHIGAKI)
  - Resolved #95511: primary_key_info fails to return names for
    named primary keys (Kenneth Kroenlein)
  - Resolved #96050: Segfault in disconnected sqlite_db_filename
    (reported by Alex Vandiver) (ISHIGAKI)
  1.43_02 2014-03-26
  - Limited -std=gnu99 to solaris gcc only, though it may be
    harmless in many cases (mattp++) (ISHIGAKI)
  1.43_01 2014-03-26
  - Added -std=gnu99 for solaris gcc users (reported by mattp++)
    (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.48 2015-06-12
  - Switched to a production version. (ISHIGAKI)
  1.47_05 2015-05-08
  - Updated to SQLite 3.8.10
  1.47_04 2015-05-02
  - Used MY_CXT instead of a global variable
  1.47_03 2015-04-16
  - Added :all to EXPORT_TAGS in ::Constants
  1.47_02 2015-04-16
  - Updated to SQLite 3.8.9
  - Added DBD::SQLite::Constants, from which you can import any
    "useful" constants into your applications.
  - Removed previous Cygwin hack as SQLite 3.8.9 compiles well again
  - Now create_function/aggregate accepts an extra bit
    (SQLITE_DETERMINISTIC) for better performance.
  1.47_01 2015-02-17
  * ** (EXPERIMENTAL) CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Commented OPTIMIZE out of WriteMakefile (RT #94207).
    If your perl is not compiled with -O2, your DBD::SQLite may
    possibly behave differently under some circumstances.
    (This release is to find notable examples from CPAN Testers).
  - Set THREADSAFE to 0 under Cygwin to cope with an upstream
    regression since 3.8.7 (GH #7).
  - Updated to SQLite 3.8.8.2
  - Resolved #35449: Fast DBH-&gt;do (ptushnik, ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1455364800">- updated to 1.50
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.50 2016-02-11
  - Switched to a production version.
  1.49_08 2016-01-30
  - no significant code changes
  - Resolved RT#111558: Virtual table tests depend on enhanced
    query syntax availability (vlmarek++)
  - Ingore FTS tests if FTS is not available
  1.49_07 2016-01-21
  - Updated to SQLite 3.10.2, which fixed a case-folding bug
    in the LIKE operator introduced in SQLite 3.10.0.
  1.49_06 2016-01-15
  - Updated to SQLite 3.10.1, which fixed an old bug that could
    generate incorrect results when a scalar subquery attempts
    to use the block sorting optimization.
  1.49_05 2016-01-11
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.10.0.
    Because of the addition of LIKE/GLOB/REGEXP support on
    virtual tables, previous ::PerlData virtual table got broken.
    This is hopefully fixed by adding strlike/strglob functions
    to DBD::SQLite but if you use this virtual table, please
    test it carefully.
  - Now you can make a database connection read-only if you
    turn on the ReadOnly attribute when you connect. (RT #110439)
    If you set it after you connect to a database, DBD::SQLite
    warns because the database doesn't actually become read-only.
  - Improved ::Constants
  - to load DBD::SQLite by itself
  - to expose SQLITE_VERSION_NUMBER
  - introduced a few new (shorter) tags
  1.49_04 2015-11-24
  - Updated ::Constants
  - Fixed a sqlite version number in a test (GH-14; NANIS++)
  1.49_03 2015-11-05
  - Updated to SQLite 3.9.2, with JSON support
  1.49_02 2015-10-10
  - Added a workaround to resolve #106950 Extra warnings
    with savepoints (hopefully)
  - Not to run tests for table_column_metadata unless
    ENABLE_COLUMN_METADATA is set
  1.49_01 2015-08-04
  - Updated to SQLite 3.8.11.1
  - Resolved #106151 SAVEPOINT bug
  - Made sure to keep what's left in unprepared_statements when
    allow_multiple_statements is set. (GH #11)</changelog>
  <changelog author="coolo@suse.com" date="1479297600">- updated to 1.52
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.52 2016-11-15
  - Switched to a production version.
  1.51_07 2016-10-16
  - Downgraded SQLite to 3.13.0 (RT#118395)
  1.51_06 2016-10-15
  - Updated SQLite to 3.15.0
  1.51_05 2016-06-23
  - Updated SQLite to 3.13.0
  - Resolved #115465: column_info doesn't parse sizes with spaces
    (ilmari++)
  - Added two missing function declarations (rurban++)
  1.51_04 2016-03-07
  - Updated SQLite to 3.11.1, which fixed an FTS5 index
    corruption issue
  1.51_03 2016-02-20
  - No code change
  - Resolved #112220: t/62_regexp_multibyte_char_class.t fails
    for perl &gt;= 5.22.0 and non-utf8 locale (SREZIC++)
  1.51_02 2016-02-20
  - No code change; fixed a newly added test that only passed
    under recent perls (&gt;= 5.18)
  1.51_01 2016-02-20
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.11.0.
    As upstream disabled two-arg fts3_tokenizer() for security concern,
    DBD::SQLite also stopped enabling it by default. If you do need
    perl tokenizer, compile/install with SQLITE_ENABLE_FTS3_TOKENIZER
    environmental variable.
  - Applied a doc patch by Salvatore Bonaccorso
  - Enabled (experimental) FTS5
  - Fixed REGEXP function to work under sqlite_unicode correctly
    (András Farkas++)</changelog>
  <changelog author="coolo@suse.com" date="1482667200">- updated to 1.54
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.54 2016-12-24
  - Switched to a production version.
  - Resolved RT#119219: Trivial documentation bug in DBL::SQLite 1.52
  1.53_01 2016-11-26
  - Re-enabled perl tokenizer by calling sqlite_db_config
    if SQLite &gt;= 3.12</changelog>
  <changelog author="coolo@suse.com" date="1519905600">- updated to 1.56
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.56 2018-02-28
  - Switched to a production version.
  1.55_07 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Upgraded SQLite to 3.22.0
  - Disabled two STAT compile time options (tentatively),
    which fixes RT-124227 anyway
  1.55_06 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Downgraded SQLite to 3.19.3 because of a SQLite regression
    (RT-124227, ribasushi++)
  - Fixed some tests to adapt to a change in error format
    introduced by the latest DBI
  - Remove no warnings test from t/43_fts.t which failed under
    some environments
  1.55_05 2017-12-16
  - Implemented ParamValues statement handle attribute (RT-123886)
  1.55_04 2017-11-22
  - Updated SQLite to 3.21.0
  - Resolved #122581: statistics_info() doesn't work correctly
    (John Deighan)
  - Fixed typo (GH#26, ReneNyffenegger)
  - Silenced some warnings (GH#25, Jacques Germishuys)
  - Fixed no dot in @INC issue (GH#24, ribasushi)
  - Fixed zero-length BLOB value is retrieved as undef
    (GH#23, SATO Kentaro)
  - Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
    (GH#28, fschlich)
  - noted on sqlite_extended_result_codes handle attribute
  1.55_03 2017-02-14
  - Updated SQLite to 3.17.0
  1.55_02 2017-01-08
  - Updated SQLite to 3.16.2
  - Fixed statistics_info when only unique indexes were requested (Dave
    Rolsky++). GitHub #21
  1.55_01 2017-01-04
  - Updated SQLite to 3.16.0</changelog>
  <changelog author="coolo@suse.com" date="1522324800">- updated to 1.58
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.58 2018-03-28
  - Switched to a production version.
  1.57_01 2018-03-21
  - Made it an error to fetch attributes from a statement
    handle whose database handle is inactive (ribasushi++)</changelog>
  <changelog author="coolo@suse.com" date="1544097600">- updated to 1.60
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.60 2018-12-01
  - Switched to a production version
  1.59_03 2018-11-03
  - Added a note on the long standing bug on TYPE statement
    handle attribute
  - Applied a doc patch on Virtual::PerlData by Björn Höhrmann
    (GH-31)
  1.59_02 2018-09-30
  - Upgraded SQLite to 3.25.2
  1.59_01 2018-09-17
  - Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
    and UPSERT among others
  - Added ::GetInfo (GH#32, Brendan Byrd)
  - Fix to use a PV value as a virtual table column value
    where appropriate (RT-124941)
  - Add deferrability to foreign_key_info (mohawk2)</changelog>
  <changelog author="coolo@suse.com" date="1546084800">- updated to 1.62
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.62 2018-12-29
  - Switched to a production version
  1.61_04 2018-12-22
  - Added sqlite_db_config method and new constants for it
  - Added sqlite_defensive option to disallow dangerous SQLite features
  - Exposed some of the hidden extended result codes
  1.61_03 2018-12-19
  - Upgraded SQLite to 3.26.0, which reportedly has a security fix
  1.61_02 2018-12-01
  - Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  - Introduced sqlite_prefer_numeric_type database handle attribute
    that changes the value of TYPE statement handle attribute
    from an array of string to an array of integer, as an experimental
    feature. Setting this may break your applications.
  - Changed preferred bugtracker
  1.61_01 2018-12-01
  - Added ability to configure SQLITE_MAX_LENGT with environmental
    variable (Roy Storey)
  - Added sqlite_limit database handle method to change run-time limits
  - Upgraded SQLite to 3.25.3
  - Updated constants</changelog>
  <changelog author="coolo@suse.com" date="1565697600">- updated to 1.64
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.64 2019-08-12
  - Switched to a production version
  1.63_05 2019-07-12
  - Upgraded SQLite to 3.29.0
  - Added sqlite_get_autocommit private method (GH#52)
  - Addded new db_config constants, notably to prohibit
    double-quoted string literals
  1.63_04 2019-05-25
  - Upgraded SQLite to 3.28.0
  - Modified doc for sqlite_db_filename which actually returns undef
    or an empty string (GH#50)
  - Fixed -&gt;quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)
  1.63_03 2019-02-15
  - Applied a patch to fix segmentation fault on 32-bit big-endian
    platforms by Niko Tyni (GH#45)
  1.63_02 2019-02-14
  - Upgraded SQLite to 3.27.1
  - Let a URI filename test skip if SQLite is compiled with URI filename
    support (GH#47)
  1.63_01 2019-01-26
  - Made sure an internal hv is initialized (GH#45)
  - Fixed a number of tests to skip
  - Bumped up Test::More requirement
  - Replaced bundled Test::NoWarnings with Test::FailWarnings
  - Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)</changelog>
  <changelog author="timueller+perl@suse.de" date="1598875200">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.66 2020-08-30
  - Switched to a production version
  1.65_03 2020-07-27
  - Upgraded SQLite to 3.32.3
  1.65_02 2020-02-08
  - Upgraded SQLite to 3.31.1
  1.65_01 2020-01-18
  - Upgraded SQLite to 3.30.1
  - Added several SQL_ types as alias (pali++)
  - Fixed two initialization issues (ppisar++)
  - Allowed create_function to return an array reference
    to specify the type of the value</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000000">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000001">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000002">- Use external sqlite3 library rather than internal code.
  [bsc#1195771, perl-DBD-SQLite-use-external-sqlite3.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1664280000">- Fixed a test failed comparing Lowercase type data. Patch created from
  github repo commit: ba4f472e7372dbf453444c7764d1c342e7af12b8
  [bsc#1203742, 0001-bsc-1203442-lowercase-test.patch}</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715860800">- Remove sqlite files when building with system libraries
  * Avoiding having wrong sqlite version when checking with the perl module
    [bsc#1218946]</changelog>
</package>
<package pkgid="2bd4902c98adecee2b590aae44db1ead64711a5af889d005ea5dc8d676169f5e" name="perl-DBD-SQLite" arch="s390x">
  <version epoch="0" ver="1.66" rel="150300.3.12.1"/>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 1.46
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.46 2014-12-10
  - Switched to a production version. (ISHIGAKI)
  1.45_06 2014-11-26
  - Silenced a compile-time warning (Unescaped left brace
    in regex is deprecated) in PerlData virtual table
    under bleadperl
  1.45_05 2014-11-25
  - Updated to SQLite 3.8.7.2
  - Restored regexp support in PerlData virtual table
    by secure reimplementation using closure (DAMI++)
  1.45_04 2014-10-28
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Changed to apply quotemeta() to parameters while building
    a query for a virtual table using PerlData for security.
    (RIBASUSHI++ and MAUKE++) (DAMI, ISHIGAKI)
  1.45_03 2014-10-25
  - Fixed regression of 0 as integer (ISHIGAKI)
  1.45_02 2014-10-23
  - Improved int overflow handling under 32bit strawberry perl
    (ISHIGAKI)
  1.45_01 2014-10-22
  - Updated to SQLite 3.8.7 (ISHIGAKI)
  - Resolved #76395 (hopefully): int values over 32 bit in length
    produce an error "datatype mismatch" (ISHIGAKI)
  1.44 2014-10-22
  - Switched to a production version. (ISHIGAKI)
  1.43_09 2014-10-20
  - Resolved #99583: Legacy DOS 8.3 filename support incompatible
    with SQLITE WAL journal mode (spotted by Pat Horton) (ISHIGAKI)
  - 1.43_07/08 were not VC6 compatible (ISHIGAKI)
  1.43_08 2014-08-21
  - Updated to SQLite 3.8.6, which should fix a unique index
    issue: see http://www.sqlite.org/src/info/9a6daf340df99ba93c
    for details (ISHIGAKI)
  1.43_07 2014-07-30
  - Resolved #97598: Crash on disconnect with virtual tables (FTS4)
    (patch and test code by Rob++) (ISHIGAKI)
  1.43_06 2014-07-22
  - Fixed compile error/warning for older perls (reported by ribasushi)
    (ISHIGAKI)
  1.43_05 2014-07-21
  - No significant code changes; removed unnecessary dependencies.
  1.43_04 2014-07-21
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #96877: sql statements should be converted to utf8 (DAMI)
    If you set sqlite_unicode to true, SQL statements will be upgraded
    to avoid inconsistency between embedded params and bind params.
  - Resolved #96494: [PATCH] add SYSTEM TABLE to table_info() type
    list (MJP)
  - Supported virtual tables in Perl, and added two sample tables
    (DAMI++)
  1.43_03 2014-06-12
  - Updated to SQLite 3.8.5, which should fix query planner's
    issues in SQLite (ISHIGAKI)
  - Fixed busy_timeout to accept 0 to disable (reported by zdm)
    (ISHIGAKI)
  - Resolved #95511: primary_key_info fails to return names for
    named primary keys (Kenneth Kroenlein)
  - Resolved #96050: Segfault in disconnected sqlite_db_filename
    (reported by Alex Vandiver) (ISHIGAKI)
  1.43_02 2014-03-26
  - Limited -std=gnu99 to solaris gcc only, though it may be
    harmless in many cases (mattp++) (ISHIGAKI)
  1.43_01 2014-03-26
  - Added -std=gnu99 for solaris gcc users (reported by mattp++)
    (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.48 2015-06-12
  - Switched to a production version. (ISHIGAKI)
  1.47_05 2015-05-08
  - Updated to SQLite 3.8.10
  1.47_04 2015-05-02
  - Used MY_CXT instead of a global variable
  1.47_03 2015-04-16
  - Added :all to EXPORT_TAGS in ::Constants
  1.47_02 2015-04-16
  - Updated to SQLite 3.8.9
  - Added DBD::SQLite::Constants, from which you can import any
    "useful" constants into your applications.
  - Removed previous Cygwin hack as SQLite 3.8.9 compiles well again
  - Now create_function/aggregate accepts an extra bit
    (SQLITE_DETERMINISTIC) for better performance.
  1.47_01 2015-02-17
  * ** (EXPERIMENTAL) CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Commented OPTIMIZE out of WriteMakefile (RT #94207).
    If your perl is not compiled with -O2, your DBD::SQLite may
    possibly behave differently under some circumstances.
    (This release is to find notable examples from CPAN Testers).
  - Set THREADSAFE to 0 under Cygwin to cope with an upstream
    regression since 3.8.7 (GH #7).
  - Updated to SQLite 3.8.8.2
  - Resolved #35449: Fast DBH-&gt;do (ptushnik, ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1455364800">- updated to 1.50
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.50 2016-02-11
  - Switched to a production version.
  1.49_08 2016-01-30
  - no significant code changes
  - Resolved RT#111558: Virtual table tests depend on enhanced
    query syntax availability (vlmarek++)
  - Ingore FTS tests if FTS is not available
  1.49_07 2016-01-21
  - Updated to SQLite 3.10.2, which fixed a case-folding bug
    in the LIKE operator introduced in SQLite 3.10.0.
  1.49_06 2016-01-15
  - Updated to SQLite 3.10.1, which fixed an old bug that could
    generate incorrect results when a scalar subquery attempts
    to use the block sorting optimization.
  1.49_05 2016-01-11
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.10.0.
    Because of the addition of LIKE/GLOB/REGEXP support on
    virtual tables, previous ::PerlData virtual table got broken.
    This is hopefully fixed by adding strlike/strglob functions
    to DBD::SQLite but if you use this virtual table, please
    test it carefully.
  - Now you can make a database connection read-only if you
    turn on the ReadOnly attribute when you connect. (RT #110439)
    If you set it after you connect to a database, DBD::SQLite
    warns because the database doesn't actually become read-only.
  - Improved ::Constants
  - to load DBD::SQLite by itself
  - to expose SQLITE_VERSION_NUMBER
  - introduced a few new (shorter) tags
  1.49_04 2015-11-24
  - Updated ::Constants
  - Fixed a sqlite version number in a test (GH-14; NANIS++)
  1.49_03 2015-11-05
  - Updated to SQLite 3.9.2, with JSON support
  1.49_02 2015-10-10
  - Added a workaround to resolve #106950 Extra warnings
    with savepoints (hopefully)
  - Not to run tests for table_column_metadata unless
    ENABLE_COLUMN_METADATA is set
  1.49_01 2015-08-04
  - Updated to SQLite 3.8.11.1
  - Resolved #106151 SAVEPOINT bug
  - Made sure to keep what's left in unprepared_statements when
    allow_multiple_statements is set. (GH #11)</changelog>
  <changelog author="coolo@suse.com" date="1479297600">- updated to 1.52
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.52 2016-11-15
  - Switched to a production version.
  1.51_07 2016-10-16
  - Downgraded SQLite to 3.13.0 (RT#118395)
  1.51_06 2016-10-15
  - Updated SQLite to 3.15.0
  1.51_05 2016-06-23
  - Updated SQLite to 3.13.0
  - Resolved #115465: column_info doesn't parse sizes with spaces
    (ilmari++)
  - Added two missing function declarations (rurban++)
  1.51_04 2016-03-07
  - Updated SQLite to 3.11.1, which fixed an FTS5 index
    corruption issue
  1.51_03 2016-02-20
  - No code change
  - Resolved #112220: t/62_regexp_multibyte_char_class.t fails
    for perl &gt;= 5.22.0 and non-utf8 locale (SREZIC++)
  1.51_02 2016-02-20
  - No code change; fixed a newly added test that only passed
    under recent perls (&gt;= 5.18)
  1.51_01 2016-02-20
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.11.0.
    As upstream disabled two-arg fts3_tokenizer() for security concern,
    DBD::SQLite also stopped enabling it by default. If you do need
    perl tokenizer, compile/install with SQLITE_ENABLE_FTS3_TOKENIZER
    environmental variable.
  - Applied a doc patch by Salvatore Bonaccorso
  - Enabled (experimental) FTS5
  - Fixed REGEXP function to work under sqlite_unicode correctly
    (András Farkas++)</changelog>
  <changelog author="coolo@suse.com" date="1482667200">- updated to 1.54
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.54 2016-12-24
  - Switched to a production version.
  - Resolved RT#119219: Trivial documentation bug in DBL::SQLite 1.52
  1.53_01 2016-11-26
  - Re-enabled perl tokenizer by calling sqlite_db_config
    if SQLite &gt;= 3.12</changelog>
  <changelog author="coolo@suse.com" date="1519905600">- updated to 1.56
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.56 2018-02-28
  - Switched to a production version.
  1.55_07 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Upgraded SQLite to 3.22.0
  - Disabled two STAT compile time options (tentatively),
    which fixes RT-124227 anyway
  1.55_06 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Downgraded SQLite to 3.19.3 because of a SQLite regression
    (RT-124227, ribasushi++)
  - Fixed some tests to adapt to a change in error format
    introduced by the latest DBI
  - Remove no warnings test from t/43_fts.t which failed under
    some environments
  1.55_05 2017-12-16
  - Implemented ParamValues statement handle attribute (RT-123886)
  1.55_04 2017-11-22
  - Updated SQLite to 3.21.0
  - Resolved #122581: statistics_info() doesn't work correctly
    (John Deighan)
  - Fixed typo (GH#26, ReneNyffenegger)
  - Silenced some warnings (GH#25, Jacques Germishuys)
  - Fixed no dot in @INC issue (GH#24, ribasushi)
  - Fixed zero-length BLOB value is retrieved as undef
    (GH#23, SATO Kentaro)
  - Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
    (GH#28, fschlich)
  - noted on sqlite_extended_result_codes handle attribute
  1.55_03 2017-02-14
  - Updated SQLite to 3.17.0
  1.55_02 2017-01-08
  - Updated SQLite to 3.16.2
  - Fixed statistics_info when only unique indexes were requested (Dave
    Rolsky++). GitHub #21
  1.55_01 2017-01-04
  - Updated SQLite to 3.16.0</changelog>
  <changelog author="coolo@suse.com" date="1522324800">- updated to 1.58
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.58 2018-03-28
  - Switched to a production version.
  1.57_01 2018-03-21
  - Made it an error to fetch attributes from a statement
    handle whose database handle is inactive (ribasushi++)</changelog>
  <changelog author="coolo@suse.com" date="1544097600">- updated to 1.60
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.60 2018-12-01
  - Switched to a production version
  1.59_03 2018-11-03
  - Added a note on the long standing bug on TYPE statement
    handle attribute
  - Applied a doc patch on Virtual::PerlData by Björn Höhrmann
    (GH-31)
  1.59_02 2018-09-30
  - Upgraded SQLite to 3.25.2
  1.59_01 2018-09-17
  - Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
    and UPSERT among others
  - Added ::GetInfo (GH#32, Brendan Byrd)
  - Fix to use a PV value as a virtual table column value
    where appropriate (RT-124941)
  - Add deferrability to foreign_key_info (mohawk2)</changelog>
  <changelog author="coolo@suse.com" date="1546084800">- updated to 1.62
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.62 2018-12-29
  - Switched to a production version
  1.61_04 2018-12-22
  - Added sqlite_db_config method and new constants for it
  - Added sqlite_defensive option to disallow dangerous SQLite features
  - Exposed some of the hidden extended result codes
  1.61_03 2018-12-19
  - Upgraded SQLite to 3.26.0, which reportedly has a security fix
  1.61_02 2018-12-01
  - Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  - Introduced sqlite_prefer_numeric_type database handle attribute
    that changes the value of TYPE statement handle attribute
    from an array of string to an array of integer, as an experimental
    feature. Setting this may break your applications.
  - Changed preferred bugtracker
  1.61_01 2018-12-01
  - Added ability to configure SQLITE_MAX_LENGT with environmental
    variable (Roy Storey)
  - Added sqlite_limit database handle method to change run-time limits
  - Upgraded SQLite to 3.25.3
  - Updated constants</changelog>
  <changelog author="coolo@suse.com" date="1565697600">- updated to 1.64
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.64 2019-08-12
  - Switched to a production version
  1.63_05 2019-07-12
  - Upgraded SQLite to 3.29.0
  - Added sqlite_get_autocommit private method (GH#52)
  - Addded new db_config constants, notably to prohibit
    double-quoted string literals
  1.63_04 2019-05-25
  - Upgraded SQLite to 3.28.0
  - Modified doc for sqlite_db_filename which actually returns undef
    or an empty string (GH#50)
  - Fixed -&gt;quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)
  1.63_03 2019-02-15
  - Applied a patch to fix segmentation fault on 32-bit big-endian
    platforms by Niko Tyni (GH#45)
  1.63_02 2019-02-14
  - Upgraded SQLite to 3.27.1
  - Let a URI filename test skip if SQLite is compiled with URI filename
    support (GH#47)
  1.63_01 2019-01-26
  - Made sure an internal hv is initialized (GH#45)
  - Fixed a number of tests to skip
  - Bumped up Test::More requirement
  - Replaced bundled Test::NoWarnings with Test::FailWarnings
  - Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)</changelog>
  <changelog author="timueller+perl@suse.de" date="1598875200">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.66 2020-08-30
  - Switched to a production version
  1.65_03 2020-07-27
  - Upgraded SQLite to 3.32.3
  1.65_02 2020-02-08
  - Upgraded SQLite to 3.31.1
  1.65_01 2020-01-18
  - Upgraded SQLite to 3.30.1
  - Added several SQL_ types as alias (pali++)
  - Fixed two initialization issues (ppisar++)
  - Allowed create_function to return an array reference
    to specify the type of the value</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000000">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000001">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000002">- Use external sqlite3 library rather than internal code.
  [bsc#1195771, perl-DBD-SQLite-use-external-sqlite3.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1664280000">- Fixed a test failed comparing Lowercase type data. Patch created from
  github repo commit: ba4f472e7372dbf453444c7764d1c342e7af12b8
  [bsc#1203742, 0001-bsc-1203442-lowercase-test.patch}</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715860800">- Remove sqlite files when building with system libraries
  * Avoiding having wrong sqlite version when checking with the perl module
    [bsc#1218946]</changelog>
</package>
<package pkgid="ef0a05d5b5365a72f050016594bd4dc88834f2cde57b99b82dcdc2a82dbf910e" name="perl-DBD-SQLite" arch="src">
  <version epoch="0" ver="1.66" rel="150300.3.12.1"/>
  <changelog author="vcizek@suse.com" date="1352980800">- update to 1.37
  - Updated to SQLite 3.7.12.1 (ISHIGAKI)
  - Tweaked Makefile.PL to behave better during the Bsymbolic
    check (HMBRAND)
  - Added SQLITE_WITHOUT_ZONEMALLOC for older MacOS X (ISHIGAKI)
  - Fix &gt;32bit integer truncation and other sqlite_set_result
    condition issue (Yuriy Kaminskiy)
  - Fix integer overflow in passing argument to perl function
  - Convert unsigned -&gt; int64 when possible (Yuriy Kaminskiy)
  - Turned datatype mismatch error (introduced in 1.34_02) into
    a warning (you can disable this warning by setting PrintWarn
    attribute to false). (ISHIGAKI)
  - Refactored sqlite_is_number to fix various corner cases
  - Downgraded SQLite to 3.7.9, as 3.7.10 turned out to be
    broken on the latest MacOS X (due to a missing symbol),
    and broke other modules that typically use temporary tables
    under a few environments too. As of this writing, would-be
    3.7.11 seems fine, but it would take another month to be
    released. (ISHIGAKI)
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
    Note that this release changed the default schema format
    number, that means newly created database files will be
    unreadable by SQLite version prior to 3.3.0 (2006-01-10)
    (or DBD::SQLite prior to 1.12) unless you explicitly issue
    "PRAGMA legacy_file_format=ON".
  - Enabled SQLITE_ENABLE_FTS4
  - Enabled SQLITE_ENABLE_STAT3
  - Resolved #73159: FTS tokenizer segfault (ISHIGAKI)
  - Resolved #73787: sqlite_see_if_its_a_number causes a buffer
    overflow (ISHIGAKI)
  - Resolved #73314 for DBD-SQLite: binding of 64bit integers fail
    on 1.34_02 (ISHIGAKI)
  - Implemented sqlite_trace and sqlite_profile methods for simpler
    tracing/profiling; use DBI_TRACE/DBI_PROFILE for more
    complicated cases (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1374667200">- updated to 1.39
  1.39 Fri 31 May 2013
  - Production release, no changes from 1.38_05
  1.38_05 Fri 31 May 2013
  - OpenBSD doesn't like the previous _XOPEN_SOURCE hack (ISHIGAKI)
  - Disabled a unicode-related test for older perls (ISHIGAKI)
  1.38_04 Wed 29 May 2013
  - Tentatively defined _XOPEN_SOURCE under *BSD systems to see
    if it solves a compilation issue for threaded perls (ISHIGAKI)
  1.38_03 Mon 20 May 2013
  * ** NOTICE ON QUERY OPTIMIZER ENHANCEMENT ***
  - As of SQLite 3.7.15, SQLite's query optimizer was enhanced
    and the result order of a SELECT statement without an ORDER
    BY clause may be different from the one of the previous
    versions. If your applications or tests mistakenly depend
    on the arbitrary output order, they may be broken with this
    enhancement.
  - Updated to SQLite 3.7.17 (ISHIGAKI)
  - Fixed tests that mistakenly made invalid assumptions about
    the result order (ISHIGAKI)
  - Added a brief note on useful pragmata. (ISHIGAKI)
  - Resolved #85302: type fixes (ISHIGAKI)
  1.38_02 Thu 4 Apr 2013
  - Updated to SQLite 3.7.16.1 (ISHIGAKI)
  - Removed two obsolete pragma calls at login time (ISHIGAKI)
  - Resolved #80344: Set SQLITE_DISABLE_DIRSYNC on AIX (suggested
    by Steve Barnsley) (ISHIGAKI)
  - Resolved #81536: primary_key_info returns the wrong KEY_SEQ
    (VLYON)
  - Resolved #84027: Finalizer() not called in (D. Richard Hipp)
  - Resolved #84372: -Wpointer-sign warnings with utf8_hop
    (RURBAN)
  - Resolved #84373: Add test for RT #26775 "name)" key with
    DISTINCT (RURBAN/ISHIGAKI)
  - Resolved #70815: DBD::SQLite 1.33 build is broken under
    Solaris using Sun C (RURBAN)
  - Resolved #84380: Fix WINLIKE for mingw/msys (RURBAN)
  - Added a note on DBD::SQLite and File::Temp (suggested by
    TOKUHIROM) (ISHIGAKI)
  1.38_01 Mon 24 Sep 2012
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #56444: immediate transaction should be on by
    default, and the doc be updated.
    If you really need the deferred transaction (which had long
    been the default), set sqlite_use_immediate_transaction
    to false explicitly. (ISHIGAKI)
  - Updated to SQLite 3.7.14 (ISHIGAKI)
  - Added support for foreign_key_info (DAMI/ISHIGAKI)
  - Added several methods to retrieve internal information such as
    table_column_metadata/db_filename/*_status (ISHIGAKI/VOVKASM)
  - Added sqlite_load_extension so that extensions can add
    functions internally (ISHIGAKI)
  - Resolved #77617: atoll () sometimes just is atol () (GAAS)
  - Resolved #48084: improper "require utf8" in tests (ISHIGAKI)
  - Resolved #77724: bug in primary_key_info with regard to column</changelog>
  <changelog author="coolo@suse.com" date="1375012800">- updated to 1.40
  - NetBSD also doesn't like the _XOPEN_SOURCE hack (ISHIGAKI)
  - Resolved #86080: PATCH: statistics_info support (DDICK)</changelog>
  <changelog author="coolo@suse.com" date="1411128000">- updated to 1.42
  - Switched to a production version. (ISHIGAKI)
  1.41_07 2014-03-13
  - Updated to SQLite 3.8.4.1, which fixed several obscure bugs on
    "ORDER BY" or "DISTINCT". (ISHIGAKI)
  1.41_06 2014-02-12
  - Updated to SQLite 3.8.3.1, which fixed a SQLite bug in 3.8.2
    (bundled in DBD::SQLite 1.41_04/5) that could cause queries to
    omit valid out rows. (ISHIGAKI)
  1.41_05 2014-01-22
  - Resolved #92322: Failure under heavily parallelized tests
    (ISHIGAKI)
  - Disabled Test::NoWarnings in a test
  1.41_04 2014-01-12
  - Updated to SQLite 3.8.2 (ISHIGAKI)
  - Resolved #90211: Error in documentation (Felix Li)
  - Resolved #89351: DBD-SQLite won't compile on Cygwin 64 bit
    (Warren Young++) (ISHIGAKI)
  - Tweaked sqlite_see_if_its_a_number not to guess data types of
    bind values with explicit type specification (via bind_param()
    etc) (mje++, ilmari++) (ISHIGAKI)
  1.41_03 2013-09-05
  - Updated to SQLite 3.8.0.2 (ISHIGAKI)
  1.41_02 2013-08-30
  - Updated to SQLite 3.8.0.1 to resolve #88228 (RIBASUSHI++)
    (ISHIGAKI)
  1.41_01 2013-08-27
  * ** NOTICE ON NEXT GENERATION QUERY PLANNER ***
  - As of SQLite 3.8.0, SQLite's query planner has been rewritten.
    According to the author, the new query planner should give
    exactly the same result (though perhaps with a little less CPU
    time spent planning) for simple queries, and for complex
    queries, it can in many cases provide a much faster answer.
    See http://www.sqlite.org/queryplanner-ng.html for details.
  * ** NOTICE ON PARTIAL INDICES ***
  - Database files created by SQLite 3.8.0 are still readable and
    writable by prior versions, but if you use partial indices
    introduced in SQLite 3.8.0, those files become unreadable and
    unwritable by older versions of (DBD::)SQLite. They'll be
    readable/writable again by dropping partial indices.
  - Resolved #87435: PATCH: statistics_info perldoc (DDICK)
  - Resolved #87297: URI filenames in DBD::SQLite (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 1.46
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.46 2014-12-10
  - Switched to a production version. (ISHIGAKI)
  1.45_06 2014-11-26
  - Silenced a compile-time warning (Unescaped left brace
    in regex is deprecated) in PerlData virtual table
    under bleadperl
  1.45_05 2014-11-25
  - Updated to SQLite 3.8.7.2
  - Restored regexp support in PerlData virtual table
    by secure reimplementation using closure (DAMI++)
  1.45_04 2014-10-28
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Changed to apply quotemeta() to parameters while building
    a query for a virtual table using PerlData for security.
    (RIBASUSHI++ and MAUKE++) (DAMI, ISHIGAKI)
  1.45_03 2014-10-25
  - Fixed regression of 0 as integer (ISHIGAKI)
  1.45_02 2014-10-23
  - Improved int overflow handling under 32bit strawberry perl
    (ISHIGAKI)
  1.45_01 2014-10-22
  - Updated to SQLite 3.8.7 (ISHIGAKI)
  - Resolved #76395 (hopefully): int values over 32 bit in length
    produce an error "datatype mismatch" (ISHIGAKI)
  1.44 2014-10-22
  - Switched to a production version. (ISHIGAKI)
  1.43_09 2014-10-20
  - Resolved #99583: Legacy DOS 8.3 filename support incompatible
    with SQLITE WAL journal mode (spotted by Pat Horton) (ISHIGAKI)
  - 1.43_07/08 were not VC6 compatible (ISHIGAKI)
  1.43_08 2014-08-21
  - Updated to SQLite 3.8.6, which should fix a unique index
    issue: see http://www.sqlite.org/src/info/9a6daf340df99ba93c
    for details (ISHIGAKI)
  1.43_07 2014-07-30
  - Resolved #97598: Crash on disconnect with virtual tables (FTS4)
    (patch and test code by Rob++) (ISHIGAKI)
  1.43_06 2014-07-22
  - Fixed compile error/warning for older perls (reported by ribasushi)
    (ISHIGAKI)
  1.43_05 2014-07-21
  - No significant code changes; removed unnecessary dependencies.
  1.43_04 2014-07-21
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #96877: sql statements should be converted to utf8 (DAMI)
    If you set sqlite_unicode to true, SQL statements will be upgraded
    to avoid inconsistency between embedded params and bind params.
  - Resolved #96494: [PATCH] add SYSTEM TABLE to table_info() type
    list (MJP)
  - Supported virtual tables in Perl, and added two sample tables
    (DAMI++)
  1.43_03 2014-06-12
  - Updated to SQLite 3.8.5, which should fix query planner's
    issues in SQLite (ISHIGAKI)
  - Fixed busy_timeout to accept 0 to disable (reported by zdm)
    (ISHIGAKI)
  - Resolved #95511: primary_key_info fails to return names for
    named primary keys (Kenneth Kroenlein)
  - Resolved #96050: Segfault in disconnected sqlite_db_filename
    (reported by Alex Vandiver) (ISHIGAKI)
  1.43_02 2014-03-26
  - Limited -std=gnu99 to solaris gcc only, though it may be
    harmless in many cases (mattp++) (ISHIGAKI)
  1.43_01 2014-03-26
  - Added -std=gnu99 for solaris gcc users (reported by mattp++)
    (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.48 2015-06-12
  - Switched to a production version. (ISHIGAKI)
  1.47_05 2015-05-08
  - Updated to SQLite 3.8.10
  1.47_04 2015-05-02
  - Used MY_CXT instead of a global variable
  1.47_03 2015-04-16
  - Added :all to EXPORT_TAGS in ::Constants
  1.47_02 2015-04-16
  - Updated to SQLite 3.8.9
  - Added DBD::SQLite::Constants, from which you can import any
    "useful" constants into your applications.
  - Removed previous Cygwin hack as SQLite 3.8.9 compiles well again
  - Now create_function/aggregate accepts an extra bit
    (SQLITE_DETERMINISTIC) for better performance.
  1.47_01 2015-02-17
  * ** (EXPERIMENTAL) CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Commented OPTIMIZE out of WriteMakefile (RT #94207).
    If your perl is not compiled with -O2, your DBD::SQLite may
    possibly behave differently under some circumstances.
    (This release is to find notable examples from CPAN Testers).
  - Set THREADSAFE to 0 under Cygwin to cope with an upstream
    regression since 3.8.7 (GH #7).
  - Updated to SQLite 3.8.8.2
  - Resolved #35449: Fast DBH-&gt;do (ptushnik, ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1455364800">- updated to 1.50
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.50 2016-02-11
  - Switched to a production version.
  1.49_08 2016-01-30
  - no significant code changes
  - Resolved RT#111558: Virtual table tests depend on enhanced
    query syntax availability (vlmarek++)
  - Ingore FTS tests if FTS is not available
  1.49_07 2016-01-21
  - Updated to SQLite 3.10.2, which fixed a case-folding bug
    in the LIKE operator introduced in SQLite 3.10.0.
  1.49_06 2016-01-15
  - Updated to SQLite 3.10.1, which fixed an old bug that could
    generate incorrect results when a scalar subquery attempts
    to use the block sorting optimization.
  1.49_05 2016-01-11
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.10.0.
    Because of the addition of LIKE/GLOB/REGEXP support on
    virtual tables, previous ::PerlData virtual table got broken.
    This is hopefully fixed by adding strlike/strglob functions
    to DBD::SQLite but if you use this virtual table, please
    test it carefully.
  - Now you can make a database connection read-only if you
    turn on the ReadOnly attribute when you connect. (RT #110439)
    If you set it after you connect to a database, DBD::SQLite
    warns because the database doesn't actually become read-only.
  - Improved ::Constants
  - to load DBD::SQLite by itself
  - to expose SQLITE_VERSION_NUMBER
  - introduced a few new (shorter) tags
  1.49_04 2015-11-24
  - Updated ::Constants
  - Fixed a sqlite version number in a test (GH-14; NANIS++)
  1.49_03 2015-11-05
  - Updated to SQLite 3.9.2, with JSON support
  1.49_02 2015-10-10
  - Added a workaround to resolve #106950 Extra warnings
    with savepoints (hopefully)
  - Not to run tests for table_column_metadata unless
    ENABLE_COLUMN_METADATA is set
  1.49_01 2015-08-04
  - Updated to SQLite 3.8.11.1
  - Resolved #106151 SAVEPOINT bug
  - Made sure to keep what's left in unprepared_statements when
    allow_multiple_statements is set. (GH #11)</changelog>
  <changelog author="coolo@suse.com" date="1479297600">- updated to 1.52
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.52 2016-11-15
  - Switched to a production version.
  1.51_07 2016-10-16
  - Downgraded SQLite to 3.13.0 (RT#118395)
  1.51_06 2016-10-15
  - Updated SQLite to 3.15.0
  1.51_05 2016-06-23
  - Updated SQLite to 3.13.0
  - Resolved #115465: column_info doesn't parse sizes with spaces
    (ilmari++)
  - Added two missing function declarations (rurban++)
  1.51_04 2016-03-07
  - Updated SQLite to 3.11.1, which fixed an FTS5 index
    corruption issue
  1.51_03 2016-02-20
  - No code change
  - Resolved #112220: t/62_regexp_multibyte_char_class.t fails
    for perl &gt;= 5.22.0 and non-utf8 locale (SREZIC++)
  1.51_02 2016-02-20
  - No code change; fixed a newly added test that only passed
    under recent perls (&gt;= 5.18)
  1.51_01 2016-02-20
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.11.0.
    As upstream disabled two-arg fts3_tokenizer() for security concern,
    DBD::SQLite also stopped enabling it by default. If you do need
    perl tokenizer, compile/install with SQLITE_ENABLE_FTS3_TOKENIZER
    environmental variable.
  - Applied a doc patch by Salvatore Bonaccorso
  - Enabled (experimental) FTS5
  - Fixed REGEXP function to work under sqlite_unicode correctly
    (András Farkas++)</changelog>
  <changelog author="coolo@suse.com" date="1482667200">- updated to 1.54
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.54 2016-12-24
  - Switched to a production version.
  - Resolved RT#119219: Trivial documentation bug in DBL::SQLite 1.52
  1.53_01 2016-11-26
  - Re-enabled perl tokenizer by calling sqlite_db_config
    if SQLite &gt;= 3.12</changelog>
  <changelog author="coolo@suse.com" date="1519905600">- updated to 1.56
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.56 2018-02-28
  - Switched to a production version.
  1.55_07 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Upgraded SQLite to 3.22.0
  - Disabled two STAT compile time options (tentatively),
    which fixes RT-124227 anyway
  1.55_06 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Downgraded SQLite to 3.19.3 because of a SQLite regression
    (RT-124227, ribasushi++)
  - Fixed some tests to adapt to a change in error format
    introduced by the latest DBI
  - Remove no warnings test from t/43_fts.t which failed under
    some environments
  1.55_05 2017-12-16
  - Implemented ParamValues statement handle attribute (RT-123886)
  1.55_04 2017-11-22
  - Updated SQLite to 3.21.0
  - Resolved #122581: statistics_info() doesn't work correctly
    (John Deighan)
  - Fixed typo (GH#26, ReneNyffenegger)
  - Silenced some warnings (GH#25, Jacques Germishuys)
  - Fixed no dot in @INC issue (GH#24, ribasushi)
  - Fixed zero-length BLOB value is retrieved as undef
    (GH#23, SATO Kentaro)
  - Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
    (GH#28, fschlich)
  - noted on sqlite_extended_result_codes handle attribute
  1.55_03 2017-02-14
  - Updated SQLite to 3.17.0
  1.55_02 2017-01-08
  - Updated SQLite to 3.16.2
  - Fixed statistics_info when only unique indexes were requested (Dave
    Rolsky++). GitHub #21
  1.55_01 2017-01-04
  - Updated SQLite to 3.16.0</changelog>
  <changelog author="coolo@suse.com" date="1522324800">- updated to 1.58
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.58 2018-03-28
  - Switched to a production version.
  1.57_01 2018-03-21
  - Made it an error to fetch attributes from a statement
    handle whose database handle is inactive (ribasushi++)</changelog>
  <changelog author="coolo@suse.com" date="1544097600">- updated to 1.60
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.60 2018-12-01
  - Switched to a production version
  1.59_03 2018-11-03
  - Added a note on the long standing bug on TYPE statement
    handle attribute
  - Applied a doc patch on Virtual::PerlData by Björn Höhrmann
    (GH-31)
  1.59_02 2018-09-30
  - Upgraded SQLite to 3.25.2
  1.59_01 2018-09-17
  - Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
    and UPSERT among others
  - Added ::GetInfo (GH#32, Brendan Byrd)
  - Fix to use a PV value as a virtual table column value
    where appropriate (RT-124941)
  - Add deferrability to foreign_key_info (mohawk2)</changelog>
  <changelog author="coolo@suse.com" date="1546084800">- updated to 1.62
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.62 2018-12-29
  - Switched to a production version
  1.61_04 2018-12-22
  - Added sqlite_db_config method and new constants for it
  - Added sqlite_defensive option to disallow dangerous SQLite features
  - Exposed some of the hidden extended result codes
  1.61_03 2018-12-19
  - Upgraded SQLite to 3.26.0, which reportedly has a security fix
  1.61_02 2018-12-01
  - Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  - Introduced sqlite_prefer_numeric_type database handle attribute
    that changes the value of TYPE statement handle attribute
    from an array of string to an array of integer, as an experimental
    feature. Setting this may break your applications.
  - Changed preferred bugtracker
  1.61_01 2018-12-01
  - Added ability to configure SQLITE_MAX_LENGT with environmental
    variable (Roy Storey)
  - Added sqlite_limit database handle method to change run-time limits
  - Upgraded SQLite to 3.25.3
  - Updated constants</changelog>
  <changelog author="coolo@suse.com" date="1565697600">- updated to 1.64
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.64 2019-08-12
  - Switched to a production version
  1.63_05 2019-07-12
  - Upgraded SQLite to 3.29.0
  - Added sqlite_get_autocommit private method (GH#52)
  - Addded new db_config constants, notably to prohibit
    double-quoted string literals
  1.63_04 2019-05-25
  - Upgraded SQLite to 3.28.0
  - Modified doc for sqlite_db_filename which actually returns undef
    or an empty string (GH#50)
  - Fixed -&gt;quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)
  1.63_03 2019-02-15
  - Applied a patch to fix segmentation fault on 32-bit big-endian
    platforms by Niko Tyni (GH#45)
  1.63_02 2019-02-14
  - Upgraded SQLite to 3.27.1
  - Let a URI filename test skip if SQLite is compiled with URI filename
    support (GH#47)
  1.63_01 2019-01-26
  - Made sure an internal hv is initialized (GH#45)
  - Fixed a number of tests to skip
  - Bumped up Test::More requirement
  - Replaced bundled Test::NoWarnings with Test::FailWarnings
  - Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)</changelog>
  <changelog author="timueller+perl@suse.de" date="1598875200">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.66 2020-08-30
  - Switched to a production version
  1.65_03 2020-07-27
  - Upgraded SQLite to 3.32.3
  1.65_02 2020-02-08
  - Upgraded SQLite to 3.31.1
  1.65_01 2020-01-18
  - Upgraded SQLite to 3.30.1
  - Added several SQL_ types as alias (pali++)
  - Fixed two initialization issues (ppisar++)
  - Allowed create_function to return an array reference
    to specify the type of the value</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000000">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000001">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000002">- Use external sqlite3 library rather than internal code.
  [bsc#1195771, perl-DBD-SQLite-use-external-sqlite3.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1664280000">- Fixed a test failed comparing Lowercase type data. Patch created from
  github repo commit: ba4f472e7372dbf453444c7764d1c342e7af12b8
  [bsc#1203742, 0001-bsc-1203442-lowercase-test.patch}</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715860800">- Remove sqlite files when building with system libraries
  * Avoiding having wrong sqlite version when checking with the perl module
    [bsc#1218946]</changelog>
</package>
<package pkgid="ec734ad0e30b342144dd47debf6f9f66057cdef94cb4e05d088deee41321ccaf" name="perl-DBD-SQLite" arch="x86_64">
  <version epoch="0" ver="1.66" rel="150300.3.12.1"/>
  <changelog author="coolo@suse.com" date="1429185600">- updated to 1.46
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.46 2014-12-10
  - Switched to a production version. (ISHIGAKI)
  1.45_06 2014-11-26
  - Silenced a compile-time warning (Unescaped left brace
    in regex is deprecated) in PerlData virtual table
    under bleadperl
  1.45_05 2014-11-25
  - Updated to SQLite 3.8.7.2
  - Restored regexp support in PerlData virtual table
    by secure reimplementation using closure (DAMI++)
  1.45_04 2014-10-28
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Changed to apply quotemeta() to parameters while building
    a query for a virtual table using PerlData for security.
    (RIBASUSHI++ and MAUKE++) (DAMI, ISHIGAKI)
  1.45_03 2014-10-25
  - Fixed regression of 0 as integer (ISHIGAKI)
  1.45_02 2014-10-23
  - Improved int overflow handling under 32bit strawberry perl
    (ISHIGAKI)
  1.45_01 2014-10-22
  - Updated to SQLite 3.8.7 (ISHIGAKI)
  - Resolved #76395 (hopefully): int values over 32 bit in length
    produce an error "datatype mismatch" (ISHIGAKI)
  1.44 2014-10-22
  - Switched to a production version. (ISHIGAKI)
  1.43_09 2014-10-20
  - Resolved #99583: Legacy DOS 8.3 filename support incompatible
    with SQLITE WAL journal mode (spotted by Pat Horton) (ISHIGAKI)
  - 1.43_07/08 were not VC6 compatible (ISHIGAKI)
  1.43_08 2014-08-21
  - Updated to SQLite 3.8.6, which should fix a unique index
    issue: see http://www.sqlite.org/src/info/9a6daf340df99ba93c
    for details (ISHIGAKI)
  1.43_07 2014-07-30
  - Resolved #97598: Crash on disconnect with virtual tables (FTS4)
    (patch and test code by Rob++) (ISHIGAKI)
  1.43_06 2014-07-22
  - Fixed compile error/warning for older perls (reported by ribasushi)
    (ISHIGAKI)
  1.43_05 2014-07-21
  - No significant code changes; removed unnecessary dependencies.
  1.43_04 2014-07-21
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Resolved #96877: sql statements should be converted to utf8 (DAMI)
    If you set sqlite_unicode to true, SQL statements will be upgraded
    to avoid inconsistency between embedded params and bind params.
  - Resolved #96494: [PATCH] add SYSTEM TABLE to table_info() type
    list (MJP)
  - Supported virtual tables in Perl, and added two sample tables
    (DAMI++)
  1.43_03 2014-06-12
  - Updated to SQLite 3.8.5, which should fix query planner's
    issues in SQLite (ISHIGAKI)
  - Fixed busy_timeout to accept 0 to disable (reported by zdm)
    (ISHIGAKI)
  - Resolved #95511: primary_key_info fails to return names for
    named primary keys (Kenneth Kroenlein)
  - Resolved #96050: Segfault in disconnected sqlite_db_filename
    (reported by Alex Vandiver) (ISHIGAKI)
  1.43_02 2014-03-26
  - Limited -std=gnu99 to solaris gcc only, though it may be
    harmless in many cases (mattp++) (ISHIGAKI)
  1.43_01 2014-03-26
  - Added -std=gnu99 for solaris gcc users (reported by mattp++)
    (ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.48 2015-06-12
  - Switched to a production version. (ISHIGAKI)
  1.47_05 2015-05-08
  - Updated to SQLite 3.8.10
  1.47_04 2015-05-02
  - Used MY_CXT instead of a global variable
  1.47_03 2015-04-16
  - Added :all to EXPORT_TAGS in ::Constants
  1.47_02 2015-04-16
  - Updated to SQLite 3.8.9
  - Added DBD::SQLite::Constants, from which you can import any
    "useful" constants into your applications.
  - Removed previous Cygwin hack as SQLite 3.8.9 compiles well again
  - Now create_function/aggregate accepts an extra bit
    (SQLITE_DETERMINISTIC) for better performance.
  1.47_01 2015-02-17
  * ** (EXPERIMENTAL) CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Commented OPTIMIZE out of WriteMakefile (RT #94207).
    If your perl is not compiled with -O2, your DBD::SQLite may
    possibly behave differently under some circumstances.
    (This release is to find notable examples from CPAN Testers).
  - Set THREADSAFE to 0 under Cygwin to cope with an upstream
    regression since 3.8.7 (GH #7).
  - Updated to SQLite 3.8.8.2
  - Resolved #35449: Fast DBH-&gt;do (ptushnik, ISHIGAKI)</changelog>
  <changelog author="coolo@suse.com" date="1455364800">- updated to 1.50
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.50 2016-02-11
  - Switched to a production version.
  1.49_08 2016-01-30
  - no significant code changes
  - Resolved RT#111558: Virtual table tests depend on enhanced
    query syntax availability (vlmarek++)
  - Ingore FTS tests if FTS is not available
  1.49_07 2016-01-21
  - Updated to SQLite 3.10.2, which fixed a case-folding bug
    in the LIKE operator introduced in SQLite 3.10.0.
  1.49_06 2016-01-15
  - Updated to SQLite 3.10.1, which fixed an old bug that could
    generate incorrect results when a scalar subquery attempts
    to use the block sorting optimization.
  1.49_05 2016-01-11
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.10.0.
    Because of the addition of LIKE/GLOB/REGEXP support on
    virtual tables, previous ::PerlData virtual table got broken.
    This is hopefully fixed by adding strlike/strglob functions
    to DBD::SQLite but if you use this virtual table, please
    test it carefully.
  - Now you can make a database connection read-only if you
    turn on the ReadOnly attribute when you connect. (RT #110439)
    If you set it after you connect to a database, DBD::SQLite
    warns because the database doesn't actually become read-only.
  - Improved ::Constants
  - to load DBD::SQLite by itself
  - to expose SQLITE_VERSION_NUMBER
  - introduced a few new (shorter) tags
  1.49_04 2015-11-24
  - Updated ::Constants
  - Fixed a sqlite version number in a test (GH-14; NANIS++)
  1.49_03 2015-11-05
  - Updated to SQLite 3.9.2, with JSON support
  1.49_02 2015-10-10
  - Added a workaround to resolve #106950 Extra warnings
    with savepoints (hopefully)
  - Not to run tests for table_column_metadata unless
    ENABLE_COLUMN_METADATA is set
  1.49_01 2015-08-04
  - Updated to SQLite 3.8.11.1
  - Resolved #106151 SAVEPOINT bug
  - Made sure to keep what's left in unprepared_statements when
    allow_multiple_statements is set. (GH #11)</changelog>
  <changelog author="coolo@suse.com" date="1479297600">- updated to 1.52
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.52 2016-11-15
  - Switched to a production version.
  1.51_07 2016-10-16
  - Downgraded SQLite to 3.13.0 (RT#118395)
  1.51_06 2016-10-15
  - Updated SQLite to 3.15.0
  1.51_05 2016-06-23
  - Updated SQLite to 3.13.0
  - Resolved #115465: column_info doesn't parse sizes with spaces
    (ilmari++)
  - Added two missing function declarations (rurban++)
  1.51_04 2016-03-07
  - Updated SQLite to 3.11.1, which fixed an FTS5 index
    corruption issue
  1.51_03 2016-02-20
  - No code change
  - Resolved #112220: t/62_regexp_multibyte_char_class.t fails
    for perl &gt;= 5.22.0 and non-utf8 locale (SREZIC++)
  1.51_02 2016-02-20
  - No code change; fixed a newly added test that only passed
    under recent perls (&gt;= 5.18)
  1.51_01 2016-02-20
  * ** CHANGES THAT MAY POSSIBLY BREAK YOUR OLD APPLICATIONS ***
  - Updated to SQLite 3.11.0.
    As upstream disabled two-arg fts3_tokenizer() for security concern,
    DBD::SQLite also stopped enabling it by default. If you do need
    perl tokenizer, compile/install with SQLITE_ENABLE_FTS3_TOKENIZER
    environmental variable.
  - Applied a doc patch by Salvatore Bonaccorso
  - Enabled (experimental) FTS5
  - Fixed REGEXP function to work under sqlite_unicode correctly
    (András Farkas++)</changelog>
  <changelog author="coolo@suse.com" date="1482667200">- updated to 1.54
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.54 2016-12-24
  - Switched to a production version.
  - Resolved RT#119219: Trivial documentation bug in DBL::SQLite 1.52
  1.53_01 2016-11-26
  - Re-enabled perl tokenizer by calling sqlite_db_config
    if SQLite &gt;= 3.12</changelog>
  <changelog author="coolo@suse.com" date="1519905600">- updated to 1.56
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.56 2018-02-28
  - Switched to a production version.
  1.55_07 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Upgraded SQLite to 3.22.0
  - Disabled two STAT compile time options (tentatively),
    which fixes RT-124227 anyway
  1.55_06 2018-01-27
  - This is a developer release to help testing DBIx::Class
  - Downgraded SQLite to 3.19.3 because of a SQLite regression
    (RT-124227, ribasushi++)
  - Fixed some tests to adapt to a change in error format
    introduced by the latest DBI
  - Remove no warnings test from t/43_fts.t which failed under
    some environments
  1.55_05 2017-12-16
  - Implemented ParamValues statement handle attribute (RT-123886)
  1.55_04 2017-11-22
  - Updated SQLite to 3.21.0
  - Resolved #122581: statistics_info() doesn't work correctly
    (John Deighan)
  - Fixed typo (GH#26, ReneNyffenegger)
  - Silenced some warnings (GH#25, Jacques Germishuys)
  - Fixed no dot in @INC issue (GH#24, ribasushi)
  - Fixed zero-length BLOB value is retrieved as undef
    (GH#23, SATO Kentaro)
  - Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
    (GH#28, fschlich)
  - noted on sqlite_extended_result_codes handle attribute
  1.55_03 2017-02-14
  - Updated SQLite to 3.17.0
  1.55_02 2017-01-08
  - Updated SQLite to 3.16.2
  - Fixed statistics_info when only unique indexes were requested (Dave
    Rolsky++). GitHub #21
  1.55_01 2017-01-04
  - Updated SQLite to 3.16.0</changelog>
  <changelog author="coolo@suse.com" date="1522324800">- updated to 1.58
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.58 2018-03-28
  - Switched to a production version.
  1.57_01 2018-03-21
  - Made it an error to fetch attributes from a statement
    handle whose database handle is inactive (ribasushi++)</changelog>
  <changelog author="coolo@suse.com" date="1544097600">- updated to 1.60
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.60 2018-12-01
  - Switched to a production version
  1.59_03 2018-11-03
  - Added a note on the long standing bug on TYPE statement
    handle attribute
  - Applied a doc patch on Virtual::PerlData by Björn Höhrmann
    (GH-31)
  1.59_02 2018-09-30
  - Upgraded SQLite to 3.25.2
  1.59_01 2018-09-17
  - Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
    and UPSERT among others
  - Added ::GetInfo (GH#32, Brendan Byrd)
  - Fix to use a PV value as a virtual table column value
    where appropriate (RT-124941)
  - Add deferrability to foreign_key_info (mohawk2)</changelog>
  <changelog author="coolo@suse.com" date="1546084800">- updated to 1.62
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.62 2018-12-29
  - Switched to a production version
  1.61_04 2018-12-22
  - Added sqlite_db_config method and new constants for it
  - Added sqlite_defensive option to disallow dangerous SQLite features
  - Exposed some of the hidden extended result codes
  1.61_03 2018-12-19
  - Upgraded SQLite to 3.26.0, which reportedly has a security fix
  1.61_02 2018-12-01
  - Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  - Introduced sqlite_prefer_numeric_type database handle attribute
    that changes the value of TYPE statement handle attribute
    from an array of string to an array of integer, as an experimental
    feature. Setting this may break your applications.
  - Changed preferred bugtracker
  1.61_01 2018-12-01
  - Added ability to configure SQLITE_MAX_LENGT with environmental
    variable (Roy Storey)
  - Added sqlite_limit database handle method to change run-time limits
  - Upgraded SQLite to 3.25.3
  - Updated constants</changelog>
  <changelog author="coolo@suse.com" date="1565697600">- updated to 1.64
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.64 2019-08-12
  - Switched to a production version
  1.63_05 2019-07-12
  - Upgraded SQLite to 3.29.0
  - Added sqlite_get_autocommit private method (GH#52)
  - Addded new db_config constants, notably to prohibit
    double-quoted string literals
  1.63_04 2019-05-25
  - Upgraded SQLite to 3.28.0
  - Modified doc for sqlite_db_filename which actually returns undef
    or an empty string (GH#50)
  - Fixed -&gt;quote($blob, SQL_BLOB) to quote correctly (GH#51, pali++)
  1.63_03 2019-02-15
  - Applied a patch to fix segmentation fault on 32-bit big-endian
    platforms by Niko Tyni (GH#45)
  1.63_02 2019-02-14
  - Upgraded SQLite to 3.27.1
  - Let a URI filename test skip if SQLite is compiled with URI filename
    support (GH#47)
  1.63_01 2019-01-26
  - Made sure an internal hv is initialized (GH#45)
  - Fixed a number of tests to skip
  - Bumped up Test::More requirement
  - Replaced bundled Test::NoWarnings with Test::FailWarnings
  - Handle 'unknown' op in DBD::SQLite::VirtualTable::PerlData (Corion++)</changelog>
  <changelog author="timueller+perl@suse.de" date="1598875200">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes
  1.66 2020-08-30
  - Switched to a production version
  1.65_03 2020-07-27
  - Upgraded SQLite to 3.32.3
  1.65_02 2020-02-08
  - Upgraded SQLite to 3.31.1
  1.65_01 2020-01-18
  - Upgraded SQLite to 3.30.1
  - Added several SQL_ types as alias (pali++)
  - Fixed two initialization issues (ppisar++)
  - Allowed create_function to return an array reference
    to specify the type of the value</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000000">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000001">- updated to 1.66
  see /usr/share/doc/packages/perl-DBD-SQLite/Changes</changelog>
  <changelog author="josef.moellers@suse.com" date="1647000002">- Use external sqlite3 library rather than internal code.
  [bsc#1195771, perl-DBD-SQLite-use-external-sqlite3.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1664280000">- Fixed a test failed comparing Lowercase type data. Patch created from
  github repo commit: ba4f472e7372dbf453444c7764d1c342e7af12b8
  [bsc#1203742, 0001-bsc-1203442-lowercase-test.patch}</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715860800">- Remove sqlite files when building with system libraries
  * Avoiding having wrong sqlite version when checking with the perl module
    [bsc#1218946]</changelog>
</package>
<package pkgid="687bc31ca0cae4bcc8bb5b94bf5867e51164c7b4db289d4f4a2fe7b60ba25422" name="perl-base-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="30537f28b0d35c2feceb35f97fddd2ad1861419e8237c6d764c6c1b447056bb7" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="77b1108789c9c42688289e49dde78f07a6525c3872ccfa0b1b4188c34a7f1c48" name="perl-base" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="77da2d70adda2c69f65ec969b34a498caa964790527f429ec4d102f75e5a8c56" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="1e9a86b3f6250c54162ef7f3f910650f498e8a73591150c9e70a904a98ae4b92" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="6db613287358730b6ffb3c7284fcc1708a591b80da1a12734c796e83a47325c2" name="perl-core-DB_File-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="db20f8ca8bc33450edb09cb1c01c5ae4f0a21b0a1ff7c60daea4f10cfb4bf083" name="perl-core-DB_File" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="d3c8c74aba67095e6a82536e10a6f7e1b13893d55893aef2c36e2ae9e3f85528" name="perl-core-DB_File" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="a1ea25acb8ec27ad56d71fba77ae0542779e8886205aff1184cef316799783fb" name="perl-core-DB_File" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="28db1205d62e628799a11791c65fe02689822899f078fa65112676626693f8da" name="perl-core-DB_File" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="d9a578c2ce6fb98652355865bb10fbb81d140e4bb6f29cb44bed8a2e587152a3" name="perl-doc" arch="noarch">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="4f10658a458066c73f46f81be01755511b6204f603d5f3d8836af16e101b187b" name="postfix" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="54a2357e6a30336b668691fec1c3625c50de40a9bacee99d31cd80459728481e" name="postfix" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="9e8a786ba116614dd4d99db3d21a78cd6b7ab3b3d1df9bfcd5725ee0357a7684" name="postfix" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="eb8956c6106cf0b2187e918aa824058e84e197f20e9a22f51e670ab21d03d8b4" name="postfix" arch="src">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="69d21d3453cfda7e3289ef00d431ddd4f9a9c89dbd6fa64c9ac9e5f3e93504c1" name="postfix" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="b68ccd8fd06b0157d8fb372e2936233eb147230d0dd604617ff9d4739fc330d6" name="postfix-bdb" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="9dc269abea37fcbe1504ca91678c241d594502067ee281289ff56b260fd0fc31" name="postfix-bdb" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="373b977e07b524968bfed0bc96745f29e60a37d190049e81d6233ad0a50e710a" name="postfix-bdb" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="49aa575be41a6125c5a8669b55b4861e1bd902040c0ddb66c4d779d3ed25c403" name="postfix-bdb" arch="src">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="2b3adac2a8cfcd6c9a0a900d93b76b3ec5c7d57e235c78bf6efe953498ef21e7" name="postfix-bdb" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="0ac3929cdf0e6d7354dc542d3bdd46186802edf03ad25b8dab027200f1952fc4" name="postfix-bdb-lmdb" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="1bae091ac165108e87b7c6617478b21f35d2312cf40afac248b9ff567fdd218c" name="postfix-bdb-lmdb" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="747f37a496d692ef0abdca97d47e281f9679867c6f02701e2ca54b4b02219028" name="postfix-bdb-lmdb" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="82a8b700e4dc912467ed7261a294b29dd199e94c4dd9666d1c50ce9c4a1784db" name="postfix-bdb-lmdb" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1651579200">- fix config.postfix 'hash' leftover with relay_recipients
- update postfix-main.cf.patch about
  * smtp_tls_security_level (obsoletes smtp_use_tls, smtp_enforce_tls)
  * smtpd_tls_security_level (obsoletes smtpd_use_tls, smtpd_enforce_tls)
- rebase/refresh patches
  * harden_postfix.service.patch
  * postfix-avoid-infinit-loop-if-no-permission.patch
  * postfix-master.cf.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch</changelog>
  <changelog author="chris@computersalat.de" date="1652184000">- remove *.swp from postfix-SUSE.tar.gz</changelog>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html.</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="acd430aa80ad3d55578c117c6d099dd9b70172bd500f82fc1b8ed6bb7d0c459d" name="postfix-devel" arch="noarch">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="78039236e9c9cb6bdcf90d7c1f7b242c223232984b4490f83a8bcb8edb35b96e" name="postfix-doc" arch="noarch">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="619ce645968fea15ac0fc8e9d2eb1ab3ce00d31bc782ce34358666684c43fd4b" name="postfix-ldap" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="4fa9d5bd579f121ace3520dc9439ec61eadde1ce888d996c4360c1c671f5c164" name="postfix-ldap" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="6e821404b22fdcbf55b23203c152105795a422a2e18ccf921814780bce6bb58c" name="postfix-ldap" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="a149ecfaaefa921f31978a856a0f6075442208a633ceef495ab1be05d718e29c" name="postfix-ldap" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="b39ce6f1aeb4298cceae9df45bec28209111d9d08a8a3762b5e149f5ccf4600b" name="postfix-mysql" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="1c23e3b60dcb938e30621241202edafd4a1b7da29d3eee245766abb0d943a72a" name="postfix-mysql" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="8a857abf9b957a06647ad2a7c4260b11e5e421beec91ae160f4d5481a19e8d97" name="postfix-mysql" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="39b0c0e0e0a1432c8099ffdfd6de1d35b890acd801e9348f2c2913fb2fafb606" name="postfix-mysql" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="d12073a99b34eec56dc162bb17412ed9788ffe370a57e87a9001e5a80a2179ff" name="postfix-postgresql" arch="aarch64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="86cd66e6975a76ee70c23c2045e18fe8341ced37fe352ac80a1aa748c6072899" name="postfix-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="e4007a59bac06743151cbde8207d7223878c9f701954f65de4184486acedec3d" name="postfix-postgresql" arch="s390x">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="5b7b1eaea9667e07fa67f7632dd8e113c656781301b9eb44a248f7857b933ec7" name="postfix-postgresql" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="150600.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1657540800">- update to 3.7.2
  https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch
  * set-default-db-type.patch
- build against libpcre2</changelog>
  <changelog author="chris@computersalat.de" date="1659614400">- use correct source signature file (gpg2)</changelog>
  <changelog author="lnussel@suse.de" date="1662465600">- own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- update to 3.7.3
  * Fixed a bug where some messages were not delivered after
    "warning: Unexpected record type 'X'. (bsc#1213515)
  * Workaround: in a TLS server disable Postfix's 1-element internal session
    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26)
    introduced a missing msg_panic() argument (in code that never executes).
  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
    request status in case of a null original recipient address.
  * Postfix 3.5.0 introduced debug logging noise in map_search_create().</changelog>
  <changelog author="varkoly@suse.com" date="1668427200">- postfix default main.cf myhostname default causes conflict
  (bsc#1192173)
  Use the postfix build in defaults for myhostname and mydestination</changelog>
  <changelog author="cathy.hu@suse.com" date="1674043200">- Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227).</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS support on Factory (deprecated and will be removed)</changelog>
  <changelog author="varkoly@suse.com" date="1675944000">- SELinux: postfix denied to access /var/spool/postfix/pid/master.pid
  (bsc#1207177) Apply proposed changes in postfix.service
- remove patch included into the source:
    harden_postfix.service.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1677326400">- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold &lt; 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1681819200">- update to 3.8.0
  * Support to look up DNS SRV records in the Postfix SMTP/LMTP
    client, Based on code by Tomas Korbar (Red Hat). For example,
    with "use_srv_lookup = submission" and "relayhost =
    example.com:submission", the Postfix SMTP client will look up
    DNS SRV records for _submission._tcp.example.com, and will relay
    email through the hosts and ports that are specified with those
    records.
  * TLS obsolescence: Postfix now treats the "export" and "low"
    cipher grade settings as "medium". The "export" and "low" grades
    are no longer supported in OpenSSL 1.1.1, the minimum version
    required in Postfix 3.6.0 and later. Also, Postfix default
    settings now exclude deprecated or unused ciphers (SEED, IDEA,
    3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
    (DH, ECDH), and public key algorithm (DSS).
  * Attack resistance: the Postfix SMTP server can now aggregate
    smtpd_client_*_rate and smtpd_client_*_count statistics by
    network block instead of by IP address, to raise the bar against
    a memory exhaustion attack in the anvil(8) server; Postfix TLS
    support unconditionally disables TLS renegotiation in the middle
    of an SMTP connection, to avoid a CPU exhaustion attack.
  * The PostgreSQL client encoding is now configurable with the
    "encoding" Postfix configuration file attribute. The default
    is "UTF8". Previously the encoding was hard-coded as "LATIN1",
    which is not useful in the context of SMTP.
  * The postconf command now warns for #comment in or after a Postfix
    parameter value. Postfix programs do not support #comment after
    other text, and treat that as input.
- rebase/refresh patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse+build@de-korte.org" date="1686052800">- update to 3.8.1
  * Optional: harden a Postfix SMTP server against remote SMTP
    clients that violate RFC 2920 (or 5321) command pipelining
    constraints. With "smtpd_forbid_unauth_pipelining = yes", the
    server disconnects a client immediately, after responding with
    "554 5.5.0 Error: SMTP protocol synchronization" and after
    logging "improper command pipelining" with the unexpected remote
    SMTP client input. This feature is disabled by default in Postfix
    3.5-3.8 to avoid breaking home-grown utilities, but it is enabled
    by default in Postfix 3.9. A similar feature is enabled by
    default in the Exim SMTP server.
  * Optional: some OS distributions crank up TLS security to 11,
    and in doing so increase the number of plaintext email deliveries.
    This introduces basic OpenSSL configuration file support that
    may be used to override OS-level settings.
    Details are in the postconf(5) manpage under tls_config_file
    and tls_config_name.
  * Bugfix (defect introduced: Postfix 1.0): the command "postconf
    .. name=v1 .. name=v2 .." (multiple instances of the same
    parameter name) created multiple main.cf name=value entries
    with the same parameter name. It now logs a warning and skips
    the earlier name(s) and value(s). Found during code maintenance.
  * Bugfix (defect introduced: Postfix 3.3): the command "postconf
  - M name1/type1='name2 type2 ...'" died with a segmentation
    violation when the request matched multiple master.cf entries.
    The master.cf file was not damaged. Problem reported by SATOH
    Fumiyasu.
  * Bugfix (defect introduced: Postfix 2.11): the command "postconf
  - M name1/type1='name2 type2 ...'" could add a service definition
    to master.cf that conflicted with an already existing service
    definition. It now replaces all existing service definitions
    that match the service pattern 'name1/type1' or the service
    name and type in 'name2 type2 ...' with a single service
    definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu.
  * Bugfix (defect introduced: Postfix 3.8) the posttls-finger
    command could access uninitialized memory when reconnecting.
    This also fixes a malformed warning message when a destination
    contains ":service" information. Reported by Thomas Korbar.
  * Bugfix (defect introduced: Postfix 3.2): the MySQL client could
    return "not found" instead of "error" (for example, resulting
    in a 5XX SMTP status instead of 4XX) during the time that all
    MySQL server connections were turned down after error. Found
    during code maintenance. File: global/dict_mysql.c. This was
    already fixed in Postfix 3.4-3.7.</changelog>
  <changelog author="varkoly@suse.com" date="1692100800">- CVE-2023-32182: postfix: config_postfix SUSE specific script
  potentially bad /tmp file usage (bsc#1211196)
  Use temp file created by mktemp</changelog>
  <changelog author="varkoly@suse.com" date="1695038400">- postfix: config.postfix causes too tight permission on main.cf
  (bsc#1215372)</changelog>
  <changelog author="varkoly@suse.com" date="1698062400">- Syntax error in update_postmaps script (bsc#1216061)</changelog>
  <changelog author="suse+build@de-korte.org" date="1699012800">- update to 3.8.3
  * Bugfix (defect introduced Postfix 2.5, date 20080104): the
    Postfix SMTP server was waiting for a client command instead
    of replying immediately, after a client certificate verification
    error in TLS wrappermode. Reported by Andreas Kinzler.
  * Usability: the Postfix SMTP server (finally) attempts to log
    the SASL username after authentication failure. In Postfix
    logging, this appends ", sasl_username=xxx" after the reason
    for SASL authentication failure. The logging replaces an
    unavailable reason with "(reason unavailable)", and replaces
    an unavailable sasl_username with "(unavailable)". Based on
    code by Jozsef Kadlecsik.
  * Compatibility bugfix (defect introduced: Postfix 2.11, date
    20130405): in forward_path, the expression ${recipient_delimiter}
    would expand to an empty string when a recipient address had
    no recipient delimiter. The compatibility fix is to use a
    configured recipient delimiter value instead. Reported by Tod
    A. Sandman.</changelog>
  <changelog author="suse+build@de-korte.org" date="1703246400">- update to 3.8.4 (bsc#1218304, CVE-2023-51764):
  * Security: this release adds support to defend
    against an email spoofing attack (SMTP smuggling) on
    recipients at a Postfix server. For background, see
    https://www.postfix.org/smtp-smuggling.html</changelog>
  <changelog author="dmueller@suse.com" date="1703764800">- update default configuration to enable the long-term fix for
  bsc#1218304, bsc#1218314 CVE-2023-51764, SMTP smuggling attack:
  * smtpd_forbid_bare_newline = yes
  * smtpd_forbid_bare_newline_exclusions = $mynetworks</changelog>
  <changelog author="varkoly@suse.com" date="1714651200">- Set inet_interfaces to loopback-only instead of localhost as
  proposed in man 5 postconf. (bsc#1223264)</changelog>
  <changelog author="varkoly@suse.com" date="1715947200">- config.postfix needs updating (bsc#1224207)
  * chkconfig -&gt; systemctl
  * Link Cyrus lmtp only if this exsists
  * /usr/lib64/sasl2 does not need to exist
  * Fetch timezone via readlink from /etc/localtime</changelog>
</package>
<package pkgid="0d8e29d3fe31ccc44c294021b76d016fe0576a91cd017ee9fbcfb1f9de6b0965" name="postgresql12" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="b16b24997a15ef0f9f27e558616f67526ebedc69b92e24afebcbe24ac66a8e99" name="postgresql12" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="84328f43f614fda2ddd77d1cc289ec1cbcdc6385687c503b12110f03dbd4c0e4" name="postgresql12" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e577aa0b70823525d96ec003ea538d0f2dbb4501f7636768d9fab083393e998c" name="postgresql12" arch="src">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="37938566361bc3836498f3d14ae86aaaea795b3858e69b3642ba70c91308f2bf" name="postgresql12" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="421ddcd7eb0534456a220eec9bfd63fe536a2818de342d9b17a1422d551a9f6c" name="postgresql12-contrib" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="69c0e70b9a2820f6c4695ba4ae210436a9ddbf43b092ae93ccbcd353e380a775" name="postgresql12-contrib" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="373570178ebe1a6b4535c1d9846da0c61847af5987160f7753a5ea5dad32e111" name="postgresql12-contrib" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="05ab8420bb6eb8b742f5057c9fb85d105f20b6480cc38022e383f65c883044ad" name="postgresql12-contrib" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="0e6a904701f5f027653d9beef0382475674885ef2a791886d039c25ec7346c1f" name="postgresql12-devel" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="183616d50399a1556fa683aafa0f49ed250e96f0361139d0b2d5139ab7e155ab" name="postgresql12-devel" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6c1f14025d2de20e8d530043c4f2b2e9c0e237f77b05160c5f944e42e5e2d7c1" name="postgresql12-devel" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="8f9c51a3e6584b115e870e42e56c57b2882f45cd016c7d047e500be85495f09b" name="postgresql12-devel" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e2b84261885fa9ec6ff076705ad745f62c139e6fb9b65f3aae24639bf7f9775f" name="postgresql12-docs" arch="noarch">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="7d52ff93d6eabd9b59e6eed567d7de58cea6daf60bf6d318948e29a7e710d9aa" name="postgresql12-llvmjit" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e6bda170036b4de3c408e113165fae2abf201a1e495ccddfc46279005750a078" name="postgresql12-llvmjit" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="0599f8a5d2bf1c0895cf9ce9192a165dd8d76cd02db1d852fd0e406e69c0c16a" name="postgresql12-llvmjit" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="21718f82d2a4e6ea7d48f0fbe5788034b7b1d471994d0e98f023df4ed47aac2a" name="postgresql12-llvmjit" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="5ba3ab6edb9c8e16b0900d989e3aa3a79ab81b658f5298e7771fffa15b92bf51" name="postgresql12-llvmjit-devel" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6349a13b7dfea91515a9ae7c9c36015bf84f35ff63bf7c5c569d24aed40d3503" name="postgresql12-llvmjit-devel" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="98654ead43fb9672e1c53fa3cfcb130605a6b6e001612e37fe0eb02ec9e1432a" name="postgresql12-llvmjit-devel" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="00be3da5aeba70431220ab5b47f4ab60ad516c4abcf7925468fd62d7a7ed1bc3" name="postgresql12-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6bc979b285d57a8ed441326871c6af205bd5a0e6e7c4b62f469f46a8cd9880d2" name="postgresql12-plperl" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="13b415b1f8b409fc52fd70a8759a73df4baec93484ef6b780fda8d01acf2f7a7" name="postgresql12-plperl" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6ea9e9ccf6b98abc0f800be76e03e1084be234c72337148b7c63f993d66714b1" name="postgresql12-plperl" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="8d627714370adf9b0a3a5c0c3ee4b7badc098db8f111e9304e15dcce5b595b7a" name="postgresql12-plperl" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="a59de7b8e263e3b3987d339400b210f244b97c0ba1b0307cabea640df4b2be9b" name="postgresql12-plpython" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="b02146a1ac077f00433d06854e04bdbb357725e760c8368ddf77916e31939a71" name="postgresql12-plpython" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="237a73f7a548f299a9401ae4953eb21411207122f87eacf563e6fd767165dcfb" name="postgresql12-plpython" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="39fcbc046842c2d17a978b6988565a0965a8264e4e7a528c7e85b8ffd02de5a1" name="postgresql12-plpython" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="c42958187abb94b1d0b8651f3f3ef171953fce85f03a3afca4664dcba6720096" name="postgresql12-pltcl" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="15c876c43b297813a62e78569d48b63d21f1f83315bc03bcc4405a6e19315363" name="postgresql12-pltcl" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="ee4051bb521748bb84e49aec1e30551e5e35c5567d8c0b4d98f5d438e63662bb" name="postgresql12-pltcl" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="9b3125f322e21988ad6e336a07200b6934b7962b25b99afe397961ae46ba4422" name="postgresql12-pltcl" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="39d0cd42ff96aae95a22d171b47894289b970908e14121429e2216a4513472cf" name="postgresql12-server" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="8f672959c68c49a68804e3fc31084de9073d9cad0d1d13a39791142e8386ea24" name="postgresql12-server" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="72d10188de2002c6a4423ef9479284ff8313198438ffc9a057d5d5b54ec2df40" name="postgresql12-server" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="a8efdf5b086c84697ae512a8fa83beb72fed55b1415cc90c2908bd8c5f1dd077" name="postgresql12-server" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="90717b6d7a1e85b4e915598dced5578e8db8bf25aa9f61e43739065a654c370c" name="postgresql12-server-devel" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="1fee9c3caeaac29b629f18370abc477d36ec48167cf6461df7f052128ee078d4" name="postgresql12-server-devel" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="1f2a89d73e54edfd7983a8b35c03794ecd04a3577af06c13fa3f03d76ef6aded" name="postgresql12-server-devel" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="af3bafec7b71eba4e722d5240bf3eeee396671f2e09f6d5298915540e15b58ef" name="postgresql12-server-devel" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e2eb1941501a48466fd0e442ac864a1ed6fa8809d6a2dfc807d529402ca7f481" name="postgresql12-test" arch="aarch64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="70abb82522b55e38bacd8d17df93ed80b97f3ce6158b2819059933bca72cf642" name="postgresql12-test" arch="ppc64le">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="79762b92ada7de2d298a4ec514dc037ef9727fb541430ddd122a63141b9db77f" name="postgresql12-test" arch="s390x">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="9abb3fc8ac6c0999a0a653f215f83f8dce85a2e595e89ddb23b2d3c3e22349fe" name="postgresql12-test" arch="x86_64">
  <version epoch="0" ver="12.19" rel="150200.8.60.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 12.13:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 12.14:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 12.15:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/12/release-12-15.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 12.16:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/12/release-12-16.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 12.17:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/12/release-12-17.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 12.18:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/12.18/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 12.19 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="2da6ffc09d5e4c75f98d966ef6d698fb441ada48bcb37e4428a0ae8754fccc66" name="postgresql13" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="a22df21cffc9798304f43fa75562cb5ca8acd5aa0ff1cfdebc68f454c5ace972" name="postgresql13" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="ef04e969dee95620b45c8cd5c247055cbda6b92b384074abb2c90f1ba3b932b4" name="postgresql13" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="86171ed56ce1ba3e3034253c55856a71721df06a3d3ee85de5e6a0fa91873881" name="postgresql13" arch="src">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e338855422aa864f365e66958b300a9c8dd00d2f7b06539340c92b2f2e38e582" name="postgresql13" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6daf5d0af62d4e28d5e5256867d7204b62b1000cffee092313d11b4a217fb4b4" name="postgresql13-contrib" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="dd1c47a2edd6ff40a7bb80d9e0ae1255263a4f7bf40c8fce7df460f03fe2e152" name="postgresql13-contrib" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="b107d57ccbd76c08c66d7efa7b51839da5ab422524ff75373474a352a91fe619" name="postgresql13-contrib" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6a040aff1eb5407a0d341b99be041c4cdbe3c9368e2c6d6d4529882c0adb4e15" name="postgresql13-contrib" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="df481338ae3bb5f40e12897389221f927998a2a141348d268ce06b7610352cdd" name="postgresql13-devel" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="17e01c468fcd5c431e7042930421a5239292a3c8ad62439f9f5356635a8cb211" name="postgresql13-devel" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="a382458cba24910bceada9e52357975c3e66dc9d102dcbbd8520784cfb75f538" name="postgresql13-devel" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="11ae0df6dd100acd0e40426724b6d283680e98ac622094ef90f0725956fb485f" name="postgresql13-devel" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="059011180b72c7d7fee16a495e5f2e08a669322258a0c6db2f2512641c6e4c3c" name="postgresql13-docs" arch="noarch">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="031fda671329fe0190390c265a0c6d468bbd1b82563460d4f808663d2d244086" name="postgresql13-llvmjit" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="2ea51e4dec15f85d9dbe235d2259ca47f9075a7990d4ec41cf81e03b9eee19bb" name="postgresql13-llvmjit" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="f18db15833c65f8d6db259417f7ae57ce547de05ef588b7919510a9e89e8b990" name="postgresql13-llvmjit" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="a2c5c61c46deb865bdff33c7d8be81d2db9c7582e0943ae6285237abcde300c2" name="postgresql13-llvmjit" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="2b1fefc9c8629052351b09154041f91c9c26888f363325701692c544ada591b7" name="postgresql13-llvmjit-devel" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="c6c80f535907a4a9845d7d5a4ebde44f6b520fce60690a26401bae65b506e3d5" name="postgresql13-llvmjit-devel" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="8ec8fa65b845dda2cdc8234da7e6683fa5745eb26049de2c3304e66975c7516e" name="postgresql13-llvmjit-devel" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="7c19cff970f848704b365ca9d750536859b4993c2fc00eaba637f002d5135a28" name="postgresql13-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="118f1d5caa407458da7cd8bb0095dfc938c42bb11e78890ccb1ca5398b93a1c0" name="postgresql13-plperl" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="743197ffe1a503217d42c9aa40741543db75cfadbb74db4af060f47fe70496bc" name="postgresql13-plperl" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6dc6f07b76e8137711e340e34cb11ae31be81399db974fdcf58748f3b0c42071" name="postgresql13-plperl" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="6c78ea46eb25268bd00480116aab77c51430d2e6c678cf38b4a4b93727ebdb24" name="postgresql13-plperl" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="8a3e970060eb0155ae8daa8a4a490010e8cc76798dac0af31c8427f082eeabb6" name="postgresql13-plpython" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="85df5f68eb791133311634e1d9c0360335cf301b4e2bdfcdfa22fd9dc900466d" name="postgresql13-plpython" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="ed1a51bbd8454e0526da2aa916a9d5cd378b0c95f87f161cc15a6af98107c747" name="postgresql13-plpython" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="c110a7d37dc0fa5636e80ec73024038ebfdaa3b9275548415df092dae5678205" name="postgresql13-plpython" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="88403fc495574da541f8f0f2afa82bbd3fd13cb078e2e5d957de4a5f195b6f2b" name="postgresql13-pltcl" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="29cd898ba05aee28eb8d0a3b5d061077a1c17f6eb18110f6ab1b7845068e8c78" name="postgresql13-pltcl" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="35ca3732e118bda26152f9be44bc949edb060cd9b0d526118e4545a35fc59d78" name="postgresql13-pltcl" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="3f883ed28943a6a9ac6435adfddeb1d46dc0aa2587f6434c074db1f2a46abf21" name="postgresql13-pltcl" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="485ff303307e1e14c9854e6d79c01a000d5b26ac213103b4903cc3d38068a6d7" name="postgresql13-server" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="f2f0fa3d4e066ec3aab061d79944b12f7d6265bbbea56b5f2bbdd63406688ce3" name="postgresql13-server" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="50534fb129951e930d89c1677e5bfe9f6ea3b0ad1467127590f67d611574092b" name="postgresql13-server" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="248fe9ad5c6b5fa3689d202ea4c2727f4d4bb6e5d5a2c0da554ba916dd800a6c" name="postgresql13-server" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="466e6c33b15a47643dd4b6780dd93b919306cd7abdfcc5c1f6f32061eea7fd7c" name="postgresql13-server-devel" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="60ad5035354f989b6e7915d86b61cb28398ea65b93481de4aa55c749338e5935" name="postgresql13-server-devel" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e64176ea16ab7f3a5a711bb8fc54a660a689df2a9ba20b6a1f0825f895cfa2d6" name="postgresql13-server-devel" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="1f1eb4982e4d681f44e51b3f292354e17d697691774590b294eff8e0fabbeb47" name="postgresql13-server-devel" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="f6f77f6bfcf3bbb0f4c1d82dcd3c65a77efe731463de39a0f1e02c92b050470f" name="postgresql13-test" arch="aarch64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="57861ecec20283a5d8a044347b3c28e5fa909dcb1ca4700cb41a6892eed3fcd3" name="postgresql13-test" arch="ppc64le">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="9a60a88be7f4110cfbf1ab0ab0cab4b3c9d75694a10a562090ed3b868020c434" name="postgresql13-test" arch="s390x">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="0ef41e38944c6dcccb7dba38d00068f9ca721becb05ee5ebe14b6858c81e9daf" name="postgresql13-test" arch="x86_64">
  <version epoch="0" ver="13.15" rel="150200.5.58.1"/>
  <changelog author="schwab@suse.de" date="1662984000">- Disable LLVM JIT on riscv64</changelog>
  <changelog author="max@suse.com" date="1663070400">- Sync spec file with postgresql15.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.</changelog>
  <changelog author="max@suse.com" date="1668081600">- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.</changelog>
  <changelog author="max@suse.com" date="1675944000">- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.</changelog>
  <changelog author="fvogt@suse.com" date="1680609600">- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.</changelog>
  <changelog author="max@suse.com" date="1681819200">- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.</changelog>
  <changelog author="max@suse.com" date="1683720000">- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.</changelog>
  <changelog author="max@suse.com" date="1685102400">- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.</changelog>
  <changelog author="max@suse.com" date="1691582400">- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html</changelog>
  <changelog author="dimstar@opensuse.org" date="1695038400">- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.</changelog>
  <changelog author="max@suse.com" date="1696939200">- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.</changelog>
  <changelog author="max@suse.com" date="1698753600">- boo#1216734: Revert the last change and make the devel package
  independend of all other subpackages except for the libs.</changelog>
  <changelog author="max@suse.com" date="1699444800">- Update to 13.13:
  * bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
    arguments in DISTINCT "any" aggregate functions. This error led
    to a text-type value being interpreted as an unknown-type value
    (that is, a zero-terminated string) at runtime. This could
    result in disclosure of server memory following the text value.
  * bsc#1216961, CVE-2023-5869: Detect integer overflow while
    computing new array dimensions. When assigning new elements to
    array subscripts that are outside the current array bounds, an
    undetected integer overflow could occur in edge cases. Memory
    stomps that are potentially exploitable for arbitrary code
    execution are possible, and so is disclosure of server memory.
  * bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
    from signalling background workers and autovacuum processes.
    The documentation says that pg_signal_backend cannot issue
    signals to superuser-owned processes. It was able to signal
    these background  processes, though, because they advertise a
    role OID of zero. Treat that as indicating superuser ownership.
    The security implications of cancelling one of these process
    types are fairly small so far as the core code goes (we'll just
    start another one), but extensions might add background workers
    that are more vulnerable.
    Also ensure that the is_superuser parameter is set correctly in
    such processes. No specific security consequences are known for
    that oversight, but it might be significant for some extensions.
  * Add support for LLVM 16 and 17
  * https://www.postgresql.org/docs/13/release-13-13.html</changelog>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.14/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1714564800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1715169600">- Upgrade to 13.15 (bsc#1224051):
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
</package>
<package pkgid="e6bb1b57df97719158caa567248f42725faa1e5978835d7efc80072866d5e25e" name="product-builder" arch="aarch64">
  <version epoch="0" ver="1.2.17" rel="150400.3.9.2"/>
  <changelog author="adrian@suse.de" date="1528200000">- 1.1.2
  * Do not generate Apple partion on ppc64le anymore
  * Allow to build medias without meta packages again</changelog>
  <changelog author="adrian@suse.de" date="1528286400">- 1.1.3
  * Another fix needed for hybrid media on x86_64</changelog>
  <changelog author="adrian@suse.de" date="1535112000">- 1.2.0
  * Add special RPi hybrid mode</changelog>
  <changelog author="adrian@suse.de" date="1547640000">- 1.2.1
  * Use RPi hybrid mode on aarch64 always (no config needed anymore)</changelog>
  <changelog author="adrian@suse.de" date="1563278400">- 1.2.2
  * track provided cpeid of products</changelog>
  <changelog author="adrian@suse.de" date="1568376000">- 1.2.3
  handle multiple packages with same name but different version/release in one repo.
  bsc#1150238</changelog>
  <changelog author="coolo@suse.com" date="1568635200">- 1.2.4
  * add SLE wrapper to prepare modules for packages dvd (jsc#SLE-8271)
  * smaller perl fixes</changelog>
  <changelog author="coolo@suse.com" date="1568808000">- 1.2.5
  * Fix SLE wrapper to take the proper architecture for packages DVD (jsc#SLE-8271)</changelog>
  <changelog author="fcrozat@suse.com" date="1576152000">- 1.2.6
  * Fix SLE wrapper for new Package DVD name.</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 1.2.7
  * Fix possible partition misallignment (bsc#1162531)</changelog>
  <changelog author="adrian@suse.de" date="1582718400">- 1.2.8
  * keep kwd file in SLE Full media wrapper (bsc#1164670)</changelog>
  <changelog author="adrian@suse.de" date="1582891200">- 1.2.9
  * fix "multiple kiwi files" error for Full media</changelog>
  <changelog author="adrian@suse.de" date="1586952000">- 1.2.10
  * disable -chrp-boot option for ppc64le (bsc#1169420)</changelog>
  <changelog author="adrian@suse.de" date="1587729600">- 1.2.11
  * revert last change, basically going back to 1.2.9 (bsc#1169840)
  * working on SLE_15_SP2 branch now to avoid incompatible changes
    in factory</changelog>
  <changelog author="adrian@suse.de" date="1615809600">- 1.2.12
  * add armv7l and riscv support (bsc#1181571)</changelog>
  <changelog author="adrian@suse.de" date="1618833600">- 1.2.13
  * add license information to report files</changelog>
  <changelog author="adrian@suse.de" date="1651492800">- 1.2.14
  * add SLSA provenenance files to medium if available (OBS-154)</changelog>
  <changelog author="adrian@suse.de" date="1683288000">- 1.2.15
  * disable joliet format on debug and source media</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1707480000">- 1.2.16
  * PowerPC: no more -part partitions (bsc#1206021)</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1715169600">- 1.2.17
  * fix PowerPC build failure introduced in 1.2.16 (bsc#1224010)</changelog>
</package>
<package pkgid="8ff9164a4502ddee93d3fafb798861b2ad27423dd83a983bfec206daab6864c3" name="product-builder" arch="ppc64le">
  <version epoch="0" ver="1.2.17" rel="150400.3.9.2"/>
  <changelog author="adrian@suse.de" date="1528200000">- 1.1.2
  * Do not generate Apple partion on ppc64le anymore
  * Allow to build medias without meta packages again</changelog>
  <changelog author="adrian@suse.de" date="1528286400">- 1.1.3
  * Another fix needed for hybrid media on x86_64</changelog>
  <changelog author="adrian@suse.de" date="1535112000">- 1.2.0
  * Add special RPi hybrid mode</changelog>
  <changelog author="adrian@suse.de" date="1547640000">- 1.2.1
  * Use RPi hybrid mode on aarch64 always (no config needed anymore)</changelog>
  <changelog author="adrian@suse.de" date="1563278400">- 1.2.2
  * track provided cpeid of products</changelog>
  <changelog author="adrian@suse.de" date="1568376000">- 1.2.3
  handle multiple packages with same name but different version/release in one repo.
  bsc#1150238</changelog>
  <changelog author="coolo@suse.com" date="1568635200">- 1.2.4
  * add SLE wrapper to prepare modules for packages dvd (jsc#SLE-8271)
  * smaller perl fixes</changelog>
  <changelog author="coolo@suse.com" date="1568808000">- 1.2.5
  * Fix SLE wrapper to take the proper architecture for packages DVD (jsc#SLE-8271)</changelog>
  <changelog author="fcrozat@suse.com" date="1576152000">- 1.2.6
  * Fix SLE wrapper for new Package DVD name.</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 1.2.7
  * Fix possible partition misallignment (bsc#1162531)</changelog>
  <changelog author="adrian@suse.de" date="1582718400">- 1.2.8
  * keep kwd file in SLE Full media wrapper (bsc#1164670)</changelog>
  <changelog author="adrian@suse.de" date="1582891200">- 1.2.9
  * fix "multiple kiwi files" error for Full media</changelog>
  <changelog author="adrian@suse.de" date="1586952000">- 1.2.10
  * disable -chrp-boot option for ppc64le (bsc#1169420)</changelog>
  <changelog author="adrian@suse.de" date="1587729600">- 1.2.11
  * revert last change, basically going back to 1.2.9 (bsc#1169840)
  * working on SLE_15_SP2 branch now to avoid incompatible changes
    in factory</changelog>
  <changelog author="adrian@suse.de" date="1615809600">- 1.2.12
  * add armv7l and riscv support (bsc#1181571)</changelog>
  <changelog author="adrian@suse.de" date="1618833600">- 1.2.13
  * add license information to report files</changelog>
  <changelog author="adrian@suse.de" date="1651492800">- 1.2.14
  * add SLSA provenenance files to medium if available (OBS-154)</changelog>
  <changelog author="adrian@suse.de" date="1683288000">- 1.2.15
  * disable joliet format on debug and source media</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1707480000">- 1.2.16
  * PowerPC: no more -part partitions (bsc#1206021)</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1715169600">- 1.2.17
  * fix PowerPC build failure introduced in 1.2.16 (bsc#1224010)</changelog>
</package>
<package pkgid="bd00954379e0dd3bfe4f6a6d5ea9140d8c08ad489485094bdf14b7bcd78a4900" name="product-builder" arch="s390x">
  <version epoch="0" ver="1.2.17" rel="150400.3.9.2"/>
  <changelog author="adrian@suse.de" date="1528200000">- 1.1.2
  * Do not generate Apple partion on ppc64le anymore
  * Allow to build medias without meta packages again</changelog>
  <changelog author="adrian@suse.de" date="1528286400">- 1.1.3
  * Another fix needed for hybrid media on x86_64</changelog>
  <changelog author="adrian@suse.de" date="1535112000">- 1.2.0
  * Add special RPi hybrid mode</changelog>
  <changelog author="adrian@suse.de" date="1547640000">- 1.2.1
  * Use RPi hybrid mode on aarch64 always (no config needed anymore)</changelog>
  <changelog author="adrian@suse.de" date="1563278400">- 1.2.2
  * track provided cpeid of products</changelog>
  <changelog author="adrian@suse.de" date="1568376000">- 1.2.3
  handle multiple packages with same name but different version/release in one repo.
  bsc#1150238</changelog>
  <changelog author="coolo@suse.com" date="1568635200">- 1.2.4
  * add SLE wrapper to prepare modules for packages dvd (jsc#SLE-8271)
  * smaller perl fixes</changelog>
  <changelog author="coolo@suse.com" date="1568808000">- 1.2.5
  * Fix SLE wrapper to take the proper architecture for packages DVD (jsc#SLE-8271)</changelog>
  <changelog author="fcrozat@suse.com" date="1576152000">- 1.2.6
  * Fix SLE wrapper for new Package DVD name.</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 1.2.7
  * Fix possible partition misallignment (bsc#1162531)</changelog>
  <changelog author="adrian@suse.de" date="1582718400">- 1.2.8
  * keep kwd file in SLE Full media wrapper (bsc#1164670)</changelog>
  <changelog author="adrian@suse.de" date="1582891200">- 1.2.9
  * fix "multiple kiwi files" error for Full media</changelog>
  <changelog author="adrian@suse.de" date="1586952000">- 1.2.10
  * disable -chrp-boot option for ppc64le (bsc#1169420)</changelog>
  <changelog author="adrian@suse.de" date="1587729600">- 1.2.11
  * revert last change, basically going back to 1.2.9 (bsc#1169840)
  * working on SLE_15_SP2 branch now to avoid incompatible changes
    in factory</changelog>
  <changelog author="adrian@suse.de" date="1615809600">- 1.2.12
  * add armv7l and riscv support (bsc#1181571)</changelog>
  <changelog author="adrian@suse.de" date="1618833600">- 1.2.13
  * add license information to report files</changelog>
  <changelog author="adrian@suse.de" date="1651492800">- 1.2.14
  * add SLSA provenenance files to medium if available (OBS-154)</changelog>
  <changelog author="adrian@suse.de" date="1683288000">- 1.2.15
  * disable joliet format on debug and source media</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1707480000">- 1.2.16
  * PowerPC: no more -part partitions (bsc#1206021)</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1715169600">- 1.2.17
  * fix PowerPC build failure introduced in 1.2.16 (bsc#1224010)</changelog>
</package>
<package pkgid="9c797a79314852abc58dca7dd7581424f09ee4cffc7a0c7c99304bad5c2fbb19" name="product-builder" arch="src">
  <version epoch="0" ver="1.2.17" rel="150400.3.9.2"/>
  <changelog author="adrian@suse.de" date="1528200000">- 1.1.2
  * Do not generate Apple partion on ppc64le anymore
  * Allow to build medias without meta packages again</changelog>
  <changelog author="adrian@suse.de" date="1528286400">- 1.1.3
  * Another fix needed for hybrid media on x86_64</changelog>
  <changelog author="adrian@suse.de" date="1535112000">- 1.2.0
  * Add special RPi hybrid mode</changelog>
  <changelog author="adrian@suse.de" date="1547640000">- 1.2.1
  * Use RPi hybrid mode on aarch64 always (no config needed anymore)</changelog>
  <changelog author="adrian@suse.de" date="1563278400">- 1.2.2
  * track provided cpeid of products</changelog>
  <changelog author="adrian@suse.de" date="1568376000">- 1.2.3
  handle multiple packages with same name but different version/release in one repo.
  bsc#1150238</changelog>
  <changelog author="coolo@suse.com" date="1568635200">- 1.2.4
  * add SLE wrapper to prepare modules for packages dvd (jsc#SLE-8271)
  * smaller perl fixes</changelog>
  <changelog author="coolo@suse.com" date="1568808000">- 1.2.5
  * Fix SLE wrapper to take the proper architecture for packages DVD (jsc#SLE-8271)</changelog>
  <changelog author="fcrozat@suse.com" date="1576152000">- 1.2.6
  * Fix SLE wrapper for new Package DVD name.</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 1.2.7
  * Fix possible partition misallignment (bsc#1162531)</changelog>
  <changelog author="adrian@suse.de" date="1582718400">- 1.2.8
  * keep kwd file in SLE Full media wrapper (bsc#1164670)</changelog>
  <changelog author="adrian@suse.de" date="1582891200">- 1.2.9
  * fix "multiple kiwi files" error for Full media</changelog>
  <changelog author="adrian@suse.de" date="1586952000">- 1.2.10
  * disable -chrp-boot option for ppc64le (bsc#1169420)</changelog>
  <changelog author="adrian@suse.de" date="1587729600">- 1.2.11
  * revert last change, basically going back to 1.2.9 (bsc#1169840)
  * working on SLE_15_SP2 branch now to avoid incompatible changes
    in factory</changelog>
  <changelog author="adrian@suse.de" date="1615809600">- 1.2.12
  * add armv7l and riscv support (bsc#1181571)</changelog>
  <changelog author="adrian@suse.de" date="1618833600">- 1.2.13
  * add license information to report files</changelog>
  <changelog author="adrian@suse.de" date="1651492800">- 1.2.14
  * add SLSA provenenance files to medium if available (OBS-154)</changelog>
  <changelog author="adrian@suse.de" date="1683288000">- 1.2.15
  * disable joliet format on debug and source media</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1707480000">- 1.2.16
  * PowerPC: no more -part partitions (bsc#1206021)</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1715169600">- 1.2.17
  * fix PowerPC build failure introduced in 1.2.16 (bsc#1224010)</changelog>
</package>
<package pkgid="2436a6d7079f282ab12dfcace81b5453dd0f94130dd78a7acd676bc68d092dfd" name="product-builder" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="150400.3.9.2"/>
  <changelog author="adrian@suse.de" date="1528200000">- 1.1.2
  * Do not generate Apple partion on ppc64le anymore
  * Allow to build medias without meta packages again</changelog>
  <changelog author="adrian@suse.de" date="1528286400">- 1.1.3
  * Another fix needed for hybrid media on x86_64</changelog>
  <changelog author="adrian@suse.de" date="1535112000">- 1.2.0
  * Add special RPi hybrid mode</changelog>
  <changelog author="adrian@suse.de" date="1547640000">- 1.2.1
  * Use RPi hybrid mode on aarch64 always (no config needed anymore)</changelog>
  <changelog author="adrian@suse.de" date="1563278400">- 1.2.2
  * track provided cpeid of products</changelog>
  <changelog author="adrian@suse.de" date="1568376000">- 1.2.3
  handle multiple packages with same name but different version/release in one repo.
  bsc#1150238</changelog>
  <changelog author="coolo@suse.com" date="1568635200">- 1.2.4
  * add SLE wrapper to prepare modules for packages dvd (jsc#SLE-8271)
  * smaller perl fixes</changelog>
  <changelog author="coolo@suse.com" date="1568808000">- 1.2.5
  * Fix SLE wrapper to take the proper architecture for packages DVD (jsc#SLE-8271)</changelog>
  <changelog author="fcrozat@suse.com" date="1576152000">- 1.2.6
  * Fix SLE wrapper for new Package DVD name.</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 1.2.7
  * Fix possible partition misallignment (bsc#1162531)</changelog>
  <changelog author="adrian@suse.de" date="1582718400">- 1.2.8
  * keep kwd file in SLE Full media wrapper (bsc#1164670)</changelog>
  <changelog author="adrian@suse.de" date="1582891200">- 1.2.9
  * fix "multiple kiwi files" error for Full media</changelog>
  <changelog author="adrian@suse.de" date="1586952000">- 1.2.10
  * disable -chrp-boot option for ppc64le (bsc#1169420)</changelog>
  <changelog author="adrian@suse.de" date="1587729600">- 1.2.11
  * revert last change, basically going back to 1.2.9 (bsc#1169840)
  * working on SLE_15_SP2 branch now to avoid incompatible changes
    in factory</changelog>
  <changelog author="adrian@suse.de" date="1615809600">- 1.2.12
  * add armv7l and riscv support (bsc#1181571)</changelog>
  <changelog author="adrian@suse.de" date="1618833600">- 1.2.13
  * add license information to report files</changelog>
  <changelog author="adrian@suse.de" date="1651492800">- 1.2.14
  * add SLSA provenenance files to medium if available (OBS-154)</changelog>
  <changelog author="adrian@suse.de" date="1683288000">- 1.2.15
  * disable joliet format on debug and source media</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1707480000">- 1.2.16
  * PowerPC: no more -part partitions (bsc#1206021)</changelog>
  <changelog author="adrian.schroeter@suse.com" date="1715169600">- 1.2.17
  * fix PowerPC build failure introduced in 1.2.16 (bsc#1224010)</changelog>
</package>
<package pkgid="0a878c5f90f4b5cea700bd7936f7058bef52dbbf549a8948c83375bb5835ae25" name="python" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="b71ac1243eabe589a01a4a9c6bfe1f47eed328e827b2f03a87f1644cf241e6cb" name="python" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="04eb96ca3f08d370d73806725d4d20c21e12b648e5bef9a59c4b93fa23978a52" name="python" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="80b906ff23f09030a246c4e212b631f007078f44d530eab17e389a994a7f8ff5" name="python" arch="src">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="6a9533c9135fde0f35fa701328a29227aa29fcdfb2c46bf0b105fb14bb6c7309" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="f42bd7157edb5defc9adb3f0c98f0f8814979c9282d320c7d2bfa054db9c170e" name="python-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="18602f0b2b86cb57f02dcb8b52192e01ddec73b8ab47dbd51a096f3f86b0ca7f" name="python-Automat" arch="src">
  <version epoch="0" ver="22.10.0" rel="150400.3.7.2"/>
  <changelog author="termim@gmail.com" date="1485259200">- Initial check in version 0.4.0</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- update to version v0.6.0
  * use version-specific travis environments
  * tox/travis: enable tests on py3.5
  * add a comment: this check doesn't catch non-None returns
  * improve function-is-empty test to work on py3.6 too
  * add more metadata to setup
  * graphviz() -&gt; asDigraph()
  * Use inspect.getfullargspec on Py3 to avoid deprecation warnings with inspect.getargspec
  * add tracing API, with docs
  * Conform author metadata to `distutils.core` API
  * tracer can return a callable to see Output invocations
  * Make hashable classes frozen for attrs 17.1.0 (fixes #62).
  * Assert that 'input' function bodies are empty, to avoid surprises.
  * reject duplicate transitions (same starting state and input)
  * tox/travis: enable tests on py3.6
  * improve tests: more cases, make pyflakes-clean
  * sigh, add more code to attain full test coverage
  * make setTrace a private API, document cautions about its use
  * cover the specimen functions in tests, remove ordify()
  * cleanup: s/assert_no_code/assertNoCode/
- convert to singlespec
- fix Source url</changelog>
  <changelog author="tchvatal@suse.com" date="1551787200">- Update to version 0.7.0:
  * test updates
  * pep fixes
- Run tests</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Add mulitbuild to make sure we do not cycle</changelog>
  <changelog author="steven.kowalik@suse.com" date="1574683200">- Update to version 0.8.0:
  * Retrieve the version from the installed distribution.
  * Add support for Python 3.8
  * Remove support for 3.4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 20.2.0
  * Fix attrs warnings</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Don't buildrequire unmaintained m2r</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Update to 22.10.0
  * Fix _test_visualize.py twisted import errors
  * Fix #17: Allow enter to have a default
  * Use CodeType.replace() in copycode for Python &gt; 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="b288d1420dcc6e7cd158c747f1d76398e79d6dd32006d2bef4b235ed60a9fc0e" name="python-Deprecated" arch="src">
  <version epoch="0" ver="1.2.14" rel="150400.10.7.2"/>
  <changelog author="tchvatal@suse.com" date="1551873600">- Initial commit, needed by PyGithub</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.2.6:
  * Fix #9: Change the project's configuration: reinforce the constraint to the Wrapt requirement.</changelog>
  <changelog author="mcalabkova@suse.com" date="1578916800">- update to 1.2.7
  * Fix: Warning displays the correct filename and line number when
    decorating a function if wrapt does not have the compiled c extension.
  * Add Black configuration file.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 1.2.9
  * Fix #20: Set the :func:warnings.warn stacklevel to 2 if
    the Python implementation is PyPy
  * Fix packit configuration: use dist-git-branch: fedora-all
  * Change the Tox configuration to run tests on PyPy v2.7 and 3.6.
  * Fix #15: The @deprecated decorator doesn't set a warning
    filter if the action keyword argument is not provided or None.
  * Fix #13: Warning displays the correct filename and line
    number when decorating a class if wrapt does not have the compiled c
    extension.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1594209600">- Update to 1.2.10
  * Fix #25: @deprecated respects global warning filters with actions other
    than “ignore” and “always” on Python 3.</changelog>
  <changelog author="code@bnavigator.de" date="1618747200">- Update to 1.2.12
  * Avoid "Explicit markup ends without a blank line" when the
    decorated function has no docstring.
  * Fix #40: 'version' argument is required in Sphinx directives.
  * Fix #41: deprecated.sphinx: strip Sphinx cross-referencing
    syntax from warning message.
- Release 1.2.11
  * Fix packit configuration: use upstream_tag_template: v{version}.
  * Fix #33: Change the class ~deprecated.sphinx.SphinxAdapter: add
    the line_length keyword argument to the constructor to specify
    the max line length of the directive text. Sphinx decorators
    also accept the line_length argument.
  * Fix #34: versionadded and versionchanged decorators don't emit
    DeprecationWarning anymore on decorated classes.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 1.2.13:
  * Change the signature of the :func:`~deprecated.sphinx.deprecated` decorator to reflect
    the valid use cases.
  * Fix ``versionadded`` and ``versionchanged`` decorators: do not return a decorator factory,
    but a Wrapt adapter.
  * change the requirements for ``pip`` to "pip &gt;= 9.0.3, &lt; 21" (Python 2.7, 3.4 and 3.5).
  * install ``typing`` when building on Python 3.4 (required by Pytest-&gt;Attrs).
  * run unit tests on Wrapt 1.13 (release candidate).</changelog>
  <changelog author="code@bnavigator.de" date="1667217600">- Provid canonicalized lowercase name
- Don't catchall files section</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1685361600">- update to 1.2.14:
  * Bug fix release
  * Fix return a correctly dedented docstring when long
    docstring are using the D212 or D213 format.
  * Add support for Python 3.11.
  * Drop support for Python older than 3.7 in build systems like
    pytest and tox, while ensuring the library remains
    production-compatible.</changelog>
</package>
<package pkgid="86cba658a06f6fc38ee15ae9d05045d13a936b89b141bb9e6df203aa280d126f" name="python-Jinja2" arch="src">
  <version epoch="0" ver="3.1.2" rel="150400.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 2.11.1
  * Fix a bug that prevented looking up a key after an attribute
  ({{ data.items[1:] }}) in an async template
  * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
  to support Python 2.7 and 3.5.
  * Added a new ChainableUndefined class to support getitem and getattr
  on an undefined object.
  * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
  * Added a default parameter for the map filter.
  * Exclude environment globals from meta.find_undeclared_variables().
  * Float literals can be written with scientific notation, like 2.56e-3.
  * Int and float literals can be written with the ‘_’ separator
  for legibility, like 12_345.
  * Fix a bug causing deadlocks in LRUCache.setdefault
  * The trim filter takes an optional string of characters to trim.
  * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
  the current context and available filters and tests.
  * Lexing templates with large amounts of whitespace is much faster.
  * Parentheses around comparisons are preserved, so {{ 2 * (3 &lt; 5) }} outputs
  “2” instead of “False”.
  * Add new boolean, false, true, integer and float tests.
  * The environment’s finalize function is only applied to the output of expressions
  (constant or not), not static template data.
  * When providing multiple paths to FileSystemLoader, a template can have
  the same name as a directory.
  * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
  expression, regardless of the environment’s undefined class. Omitting
  the else clause is a valid shortcut and should not raise an error when using
  StrictUndefined.
  * Fix behavior of loop control variables such as length and revindex0 when
  looping over a generator.
  * Async support is only loaded the first time an environment enables it,
  in order to avoid a slow initial import.
  * In async environments, the |map filter will await the filter call if needed.
  * In for loops that access loop attributes, the iterator is not advanced ahead
  of the current iteration unless length, revindex, nextitem, or last are accessed.
  This makes it less likely to break groupby results.
  * In async environments, the loop attributes length and revindex work for async iterators.
  * In async environments, values from attribute/property access will be awaited if needed.
  * PackageLoader doesn’t depend on setuptools or pkg_resources.
  * PackageLoader has limited support for PEP 420 namespace packages.
  * Support os.PathLike objects in FileSystemLoader and ModuleLoader
  * NativeTemplate correctly handles quotes between expressions. "'{{ a }}', '{{ b }}'"
  renders as the tuple ('1', '2') rather than the string '1, 2'.
  * Creating a NativeTemplate directly creates a NativeEnvironment instead
  of a default Environment.
  * After calling LRUCache.copy(), the copy’s queue methods point to the correct queue.
  * Compiling templates always writes UTF-8 instead of defaulting to the system encoding.
  * |wordwrap filter treats existing newlines as separate paragraphs to be wrapped
  individually, rather than creating short intermediate lines.
  * Add break_on_hyphens parameter to |wordwrap filter.
  * Cython compiled functions decorated as context functions will be passed the context.
  * When chained comparisons of constants are evaluated at compile time,
  the result follows Python’s behavior of returning False if any comparison
  returns False, rather than only the last one
  * Tracebacks for exceptions in templates show the correct line numbers
  and source for Python &gt;= 3.7.
  * Tracebacks for template syntax errors in Python 3 no longer show
  internal compiler frames
  * Add a DerivedContextReference node that can be used by extensions to get
  the current context and local variables such as loop
  * Constant folding during compilation is applied to some node types
  that were previously overlooked
  * TemplateSyntaxError.source is not empty when raised from an included template.
  * Passing an Undefined value to get_template (such as through extends, import,
  or include), raises an UndefinedError consistently. select_template will show
  the undefined message in the list of attempts rather than the empty string.
  * TemplateSyntaxError can be pickled.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582286400">- disable tests on 32bit archs</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Enable testing on other archs again
- Do not pull in py2 package on vim syntax</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 2.11.2
  * Fix a bug that caused callable objects with __getattr__, like
    :class:~unittest.mock.Mock to be treated as a
    :func:contextfunction. :issue:1145
  * Update wordcount filter to trigger :class:Undefined methods
    by wrapping the input in :func:soft_unicode. :pr:1160
  * Fix a hang when displaying tracebacks on Python 32-bit.
    :issue:1162
  * Showing an undefined error for an object that raises
    AttributeError on access doesn't cause a recursion error.
    :issue:1177
  * Revert changes to :class:~loaders.PackageLoader from 2.10 which
    removed the dependency on setuptools and pkg_resources, and added
    limited support for namespace packages. The changes caused issues
    when using Pytest. Due to the difficulty in supporting Python 2 and
    :pep:451 simultaneously, the changes are reverted until 3.0.
    :pr:1182
  * Fix line numbers in error messages when newlines are stripped.
    :pr:1178
  * The special namespace() assignment object in templates works in
    async environments. :issue:1180
  * Fix whitespace being removed before tags in the middle of lines when
    lstrip_blocks is enabled. :issue:1138
  * :class:~nativetypes.NativeEnvironment doesn't evaluate
    intermediate strings during rendering. This prevents early
    evaluation which could change the value of an expression.
    :issue:1186</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    Email matching requires a word character at the start of the domain part
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists</changelog>
  <changelog author="adrian@suse.de" date="1622462400">- update to 3.0.1
  Read the announcement:
    https://palletsprojects.com/blog/flask-2-0-released/
  Read the full list of changes:
    https://jinja.palletsprojects.com/changes/#version-3-0-0
- python-Jinja2-vim subpackage dropped
  vim highlight rule files do not exist anymore</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- updated upstream project URL</changelog>
  <changelog author="code@bnavigator.de" date="1625832000">- clean up single-spec: Remove python2 remnants</changelog>
  <changelog author="mmachova@suse.com" date="1628251200">- Babel is not required</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631275200">- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.</changelog>
  <changelog author="michael@stroeder.com" date="1633867200">- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
  * Fix a loop scoping bug that caused assignments in nested loops to still
    be referenced outside of it. #1427
  * Make compile_templates deterministic for filter and import names. #1452, #1453
  * Revert an unintended change that caused Undefined to act like
    StrictUndefined for the in operator. #1448
  * Imported macros have access to the current template globals in async
    environments. #1494
  * PackageLoader will not include a current directory (.) path segment.
    This allows loading templates from the root of a zip import. #1467</changelog>
  <changelog author="michael@stroeder.com" date="1636891200">- update to 3.0.3
  * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
  * Fix how the native environment treats leading and trailing spaces
    when parsing values on Python 3.10. (PR#1537)
  * Improve async performance by avoiding checks for common types. (#1514)
  * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
  * ``PackageLoader`` works when the package is a single module file. (#1512)</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- specfile:
  * update copyright year
  * require python-base &gt;= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
    "pass_context". "evalcontextfilter" and "evalcontextfunction"
    are replaced by "pass_eval_context".  "environmentfilter" and
    "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
    recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
    supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
    passing a context string as the first token in the tag, like "{%
    trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
    :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
    :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
    calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
    other comparison filters. Added the "case_sensitive" parameter
    to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
    result in "FileSystemLoader" and "PackageLoader" loading from
    drive-relative paths. :pr:`1621`</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`</changelog>
  <changelog author="kastl@b1-systems.de" date="1669982400">- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
  deprecated and will be removed in a future release.' error from
  pytest 7.2</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="7098d9dc410a992af729b5afc3b758dbb4fd7036e369bbdc0dd81bcbf4db2639" name="python-PyJWT" arch="src">
  <version epoch="0" ver="2.8.0" rel="150400.8.7.2"/>
  <changelog author="arun@gmx.de" date="1530964800">- update to version 1.6.4:
  * Reverse an unintentional breaking API change to .decode() #352</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Add patch to build with python 3.7:
  * pyjwt-python37.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1543320000">- Add patch to fix testsuite with pytest 3.9.0:
  * pyjwt-pytest390.patch</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="hpj@urpla.net" date="1549281600">- update to version 1.7.1:
  * Update test dependencies with pinned ranges
  * Fix pytest deprecation warnings
- update to version v1.7.0:
  * Remove CRLF line endings #353
  * Update usage.rst #360
  * Support for Python 3.7 #375 #379 #384
- removed pyjwt-pytest390.patch (fixed upstream)
- removed pyjwt-python37.patch (fixed upstream)
- removed dos2unix conversion of jwt/__main__.py (fixed upstream)
- add test build conditional</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes and test calls</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571400000">- Fix build with ecdsa &gt;= 0.13.3, #447
  * 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch</changelog>
  <changelog author="dmueller@suse.com" date="1612180800">- update to 2.0.1:
  * Drop support for Python 2 and Python 3.0-3.5
  * Require cryptography &gt;= 3
  * Drop support for PyCrypto and ECDSA
  * Drop CLI
  * Improve typings
  * Dropped deprecated errors
  * Dropped deprecated ``verify_expiration`` param in ``jwt.decode(...)``
  * Dropped deprecated ``verify`` param in ``jwt.decode(...)``
  * Require explicit ``algorithms`` in ``jwt.decode(...)`` by default
  * Dropped deprecated ``require_*`` options in ``jwt.decode(...)``
  * Introduce better experience for JWKs
  * further details see included CHANGELOG.rst
- drop 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch (obsolete)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1614340800">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1621339200">- update to 2.1.0:
  - Allow claims validation without making JWT signature validation mandatory. `
  - Remove padding from JWK test data. `
  - Make `kty` mandatory in JWK to be compliant with RFC7517. `
  - Allow JWK without `alg` to be compliant with RFC7517. `
  - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `
  - Add caching by default to PyJWKClient `
  - Add missing exceptions.InvalidKeyError to jwt module __init__ imports `
  - Add support for ES256K algorithm `
  - Add `from_jwk()` to Ed25519Algorithm `
  - Add `to_jwk()` to Ed25519Algorithm `
  - Export `PyJWK` and `PyJWKSet`</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635940800">- Update to 2.3.0
  * Revert "Remove arbitrary kwargs." (#701)
  * Add exception chaining (#702)
- from version 2.2.0
  * Remove arbitrary kwargs. (#657)
  * Use timezone package as Python 3.5+ is required. (#694)
  * Assume JWK without the "use" claim is valid for signing
    as per RFC7517 (#668)
  * Prefer `headers["alg"]` to `algorithm` in `jwt.encode()`. (#673)
  * Fix aud validation to support {'aud': null} case. (#670)
  * Make `typ` optional in JWT to be compliant with RFC7519. (#644)
  * Remove upper bound on cryptography version. (#693)
  * Add support for Ed448/EdDSA. (#675)</changelog>
  <changelog author="mrueckert@suse.de" date="1654603200">- Update to 2.4.0 (CVE-2022-29217 boo#1199756)
  - Security
  - [CVE-2022-29217] Prevent key confusion through
    non-blocklisted public key formats. GHSA-ffqj-6fqr-9h24
  - Other changes:
  - Explicit check the key for ECAlgorithm by @estin in
    https://github.com/jpadilla/pyjwt/pull/713
  - Raise DeprecationWarning for jwt.decode(verify=...) by @akx
    in https://github.com/jpadilla/pyjwt/pull/742
  - Don't use implicit optionals by @rekyungmin in
    https://github.com/jpadilla/pyjwt/pull/705
  - documentation fix: show correct scope for decode_complete()
    by @sseering in https://github.com/jpadilla/pyjwt/pull/661
  - fix: Update copyright information by @kkirsche in
    https://github.com/jpadilla/pyjwt/pull/729
  - Don't mutate options dictionary in .decode_complete() by @akx
    in https://github.com/jpadilla/pyjwt/pull/743
  - Add support for Python 3.10 by @hugovk in
    https://github.com/jpadilla/pyjwt/pull/699
  - api_jwk: Add PyJWKSet.__getitem__ by @woodruffw in
    https://github.com/jpadilla/pyjwt/pull/725
  - Update usage.rst by @guneybilen in
    https://github.com/jpadilla/pyjwt/pull/727
  - Docs: mention performance reasons for reusing RSAPrivateKey
    when encoding by @dmahr1 in
    https://github.com/jpadilla/pyjwt/pull/734
  - Fixed typo in usage.rst by @israelabraham in
    https://github.com/jpadilla/pyjwt/pull/738
  - Add detached payload support for JWS encoding and decoding by
    @fviard in https://github.com/jpadilla/pyjwt/pull/723
  - Replace various string interpolations with f-strings by @akx
    in https://github.com/jpadilla/pyjwt/pull/744</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Drop CVE-2022-29217-non-blocked-pubkeys.patch in older dists
  since the issue was fixed upstream in version 2.4.0</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- Update to 2.5.0
  * Bump actions/checkout from 2 to 3 by @dependabot in #758
  * Bump codecov/codecov-action from 1 to 3 by @dependabot in #757
  * Bump actions/setup-python from 2 to 3 by @dependabot in #756
  * adding support for compressed payloads by @danieltmiles in #753
  * Revert "adding support for compressed payloads" by @auvipy in #761
  * Add to_jwk static method to ECAlgorithm by @leonsmith in #732
  * Remove redundant wheel dep from pyproject.toml by @mgorny in #765
  * Adjust expected exceptions in option merging tests for PyPy3 by @mgorny in #763
  * Do not fail when an unusable key occurs by @DaGuich in #762
  * Fixes for pyright on strict mode by @brandon-leapyear in #747
  * Bump actions/setup-python from 3 to 4 by @dependabot in #769
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #770
  * docs: fix simple typo, iinstance -&gt; isinstance by @timgates42 in #774
  * Expose get_algorithm_by_name as new method by @sirosen in #773
  * Remove support for python3.6 by @sirosen in #777
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #778
  * Emit a deprecation warning for unsupported kwargs by @sirosen in #776
  * Fix typo: priot -&gt; prior by @jdufresne in #780
  * Fix for headers disorder issue by @kadabusha in #721
  * Update audience typing by @JulianMaurin in #782
  * Improve PyJWKSet error accuracy by @JulianMaurin in #786
  * Add type hints to jwt/help.py and add missing types dependency by @kkirsche in #784
  * Add cacheing functionality for JWK set by @wuhaoyujerry in #781
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #788
  * Mypy as pre-commit check + api_jws typing by @JulianMaurin in #787
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #791
  * Bump version to 2.5.0 by @jpadilla in #801</changelog>
  <changelog author="yarunachalam@suse.com" date="1666872000">- Update to 2.6.0
  Changed
  * bump up cryptography &gt;= 3.4.0 by @jpadilla in #807
  * Remove types-cryptography from crypto extra by @lautat in #805
  Fixed
  * Invalidate token on the exact second the token expires #797
  * fix: version 2.5.0 heading typo by @c0state in #803
  Added
  * Adding validation for issued_at when iat &gt; (now + leeway) as ImmatureSignatureError by @sriharan16 in #794</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Clean up SPEC file.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1684497600">- update to version 2.7.0
  * Add classifier for Python 3.11 by @eseifert in #818
  * Add Algorithm.compute_hash_digest and use it to implement at_hash validation example by @sirosen in #775
  * fix: use datetime.datetime.timestamp function to have a milliseconds by @daillouf in #821
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #825
  * Custom header configuration in jwk client by @thundercat1 in #823
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #828
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #833
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #835
  * Add PyJWT._{de,en}code_payload hooks by @akx in #829
  * Add sort_headers parameter to api_jwt.encode by @evroon in #832
  * Make mypy configuration stricter and improve typing by @akx in #830
  * Bump actions/stale from 6 to 7 by @dependabot in #840
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #838
  * Add more types by @Viicos in #843
  * Differentiate between two errors by @irdkwmnsb in #809
  * Fix _validate_iat validation by @Viicos in #847
  * Improve error messages when cryptography isn't installed by @Viicos in #846
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #852
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #855
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #859
  * Make Algorithm an abstract base class by @Viicos in #845
  * docs: correct mistake in the changelog about verify param by @gbillig in #866
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #868
  * Bump actions/stale from 7 to 8 by @dependabot in #872
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #874
  * Add a timeout for PyJWKClient requests by @daviddavis in #875
  * Add client connection error exception by @daviddavis in #876
  * Add complete types to take all allowed keys into account by @Viicos in #873
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #878
  * Build and upload PyPI package by @jpadilla in #884
  * Fix for issue #862 - ignore invalid keys in a jwks. by @timw6n in #863
  * Add as_dict option to Algorithm.to_jwk by @fluxth in #881</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693828800">- Update to version 2.8.0
  * Update python version test matrix by @auvipy in #895
  * Add ``strict_aud`` as an option to ``jwt.decode`` by @woodruffw in #902
  * Export PyJWKClientConnectionError class by @daviddavis in #887
  * Allows passing of ssl.SSLContext to PyJWKClient by @juur in #891
- Skip test_get_jwt_set_sslcontext_default test in testsuite</changelog>
</package>
<package pkgid="a5bbd1bf2bdc7a2ca7feef03cce343ec150decb4ad6ce855d8c32f56038ffa3a" name="python-PyMySQL" arch="src">
  <version epoch="0" ver="1.1.0" rel="150600.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 0.6.6:
    Add context manager to cursor
  * Fix can't encode blob that is not utf-8 on PY3. (regression of
    0.6.4, Thanks to @wiggzz)
- additional changes from version 0.6.4
  * Support "LOAD LOCAL INFILE".  Thanks @wraziens
  * Show MySQL warnings after execute query.
  * Fix MySQLError may be wrapped with OperationalError while
    connectiong. (#274)
  * SSCursor no longer attempts to expire un-collected rows within
    __del__, delaying termination of an interrupted program;
    cleanup of uncollected rows is left to the Connection on next
    execute, which emits a warning at that time. (#287)
  * Support datetime and time with microsecond. (#303)
  * Use surrogateescape to format bytes on Python 3.
  * OperationalError raised from connect() have information about
    original exception. (#304)
  * `init_command` now support multi statement.
  * `Connection.escape()` method now accepts second argument
    compatible to MySQL-Python.
- additional changes from version 0.6.3
  * Fixed multiple result sets with SSCursor.
  * Fixed connection timeout.
  * Fixed literal set syntax to work on Py2.6.
  * Allow for mysql negative values with 0 hour timedelta.
  * Added Connection.begin().
- additional changes from version 0.6.2
  * Fixed old password on Python 3.
  * Added support for bulk insert in Cursor.executemany().
  * Added support for microseconds in datetimes and dates before
    1900.
  * Several other bug fixes.
- additional changes from version 0.6.1
  * Added cursor._last_executed for MySQLdb compatibility
  * Cursor.fetchall() and .fetchmany now return list, not tuple
  * Allow "length of auth-plugin-data" = 0
  * Cursor.connection references connection object without weakref
- remove unwanted shebang of python files in test_MySQLdb</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458820800">- Update to 0.7.2
  * Fix misuse of `max_allowed_packet` parameter. (#426, #407 and #397)
  * Add %(name)s plceholder support to `Cursor.executemany()`. (#427, thanks to
    @WorldException)
- Update to 0.7.1
  * Fix auth fail with MySQL 5.1
  * Fix escaping unicode fails on Python 2
- Update to 0.7
  * Faster binary escaping
  * Add `"_binary" prefix` to string literal for binary types.
    binary types are: `bytearray` on Python 2, `bytes` and `bytearray` on Python 3.
    This is because recent MySQL show warnings when string literal is invalid for
    connection encoding.
  * `pymysql.Binary()` returns `bytearray` on Python 2.  This is required to distinguish
    binary and string.
  * Auth plugin support.
  * no_delay option is ignored.  It will be removed in PyMySQL 0.8.
- Update to 0.6.7
  * Allow self signed certificate
  * Add max_allowed_packet option
  * Fix error when bytes in executemany
  * Support geometry type
  * Add coveralls badge to README
  * Fix some bugs relating to warnings
  * Add Cursor.mogrify() method
  * no_delay option is deprecated and True by default
  * Fix options from my.cnf overrides options from arguments
  * Allow socket like object.  (It's not feature for end users)
  * Strip quotes while reading options from my.cnf file
  * Fix encoding issue in executemany()</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458820801">- Add license and docs</changelog>
  <changelog author="tbechtold@suse.com" date="1464955200">- update to 0.7.4:
  * Fix AttributeError may happen while Connection.__del__ (#463)
  * Fix SyntaxError in test_cursor. (#464)
  * frozenset support for query value. (#461)
  * Start using readthedocs.io
  * Add read_timeout and write_timeout option.
  * Support serialization customization by `conv` option.
  * Unknown type is converted by `str()`, for MySQLdb compatibility.
  * Support '%%' in `Cursor.executemany()`
  * Support REPLACE statement in `Cursor.executemany()`
  * Fix handling incomplete row caused by 'SHOW SLAVE HOSTS'.
  * Fix decode error when use_unicode=False on PY3
  * Fix port option in my.cnf file is ignored.</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.7.6:
  * Fix SELECT JSON type cause UnicodeError
  * Avoid float convertion while parsing microseconds
  * Warning has number
  * SSCursor supports warnings
  * Fix exception raised while importing when getpwuid() fails (#472)
  * SSCursor supports LOAD DATA LOCAL INFILE (#473)
  * Fix encoding error happen for JSON type (#477)
  * Fix test fail on Python 2.7 and MySQL 5.7 (#478)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502884800">- Implement single-spec version
- update to 0.7.11
  * Fixed Connection.close() failed when failed to send COM_CLOSE packet.
  * Cursor.executemany() accepts query ends with semicolon.
  * ssl parameters can be read from my.cnf.
- update to 0.7.10
  * **SECURITY FIX**: Raise RuntimeError when received LOAD_LOCAL packet while
    ``loacal_infile=False``.  (Thanks to Bryan Helmig)
  * Raise SERVER_LOST error for MariaDB's shutdown packet (#540)
  * Change default connect_timeout to 10.
  * Add bind_address option (#529)
- update to 0.7.9
  * Fix PyMySQL stop reading rows when first column is empty string (#513)
    Reverts DEPRECATE_EOF introduced in 0.7.7.
- update to 0.7.8
  * Revert error message change in 0.7.7.
    (SQLAlchemy parses error message, #507)
- update to 0.7.7
  * Add new unicode collation (#498)
  * Fix conv option is not used for encoding objects.
  * Experimental support for DEPRECATE_EOF protocol.</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- use %license instead of %doc [bsc#1082318]
- update to latest version to solve MySQLdb interface problems with
  salt-2018
- update to 0.8.1
  * Reduce `cursor.callproc()` roundtrip time. (#636)
  * Fixed `cursor.query()` is hunged after multi statement failed. (#647)
  * WRONG_DB_NAME and WRONG_COLUMN_NAME is ProgrammingError for now. (#629)
  * Many test suite improvements, especially adding MySQL 8.0 and using Docker.
  * Droppped support for old Python and MySQL whih is not tested long time.
- update to 0.8
  * **BACKWARD INCOMPATIBLE** ``binary_prefix`` option is added and off
  by default because of compatibility with mysqlclient.
  When you need PyMySQL 0.7 behavior, you have to pass ``binary_prefix=True``.
  (#549)
  * **BACKWARD INCOMPATIBLE** ``MULTI_STATEMENTS`` client flag is no longer
  set by default, while it was on PyMySQL 0.7.  You need to pass
  ``client_flag=CLIENT.MULTI_STATEMENTS`` when you connect to explicitly
  enable multi-statement mode. (#590)
  * Fixed AuthSwitch packet handling.
  * Raise OperationalError for MariaDB's constraint error. (#607)
  * executemany() accepts query without space between ``VALUES`` and ``(``.  (#597)
  * Support config file containing option without value. (#588)
  * Fixed Connection.ping() returned unintended value.</changelog>
  <changelog author="tchvatal@suse.com" date="1527163201">- Drop not really needed python-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 0.9.3:
  * cryptography dependency is optional now.
  * Fix old_password (used before MySQL 4.1) support.
  * Deprecate old_password.
  * Stop sending ``sys.argv[0]`` for connection attribute "program_name".
  * Close connection when unknown error is happened.
  * Deprecate context manager API of Connection object.
  * Disalbled unintentinally enabled debug log
  * Removed unintentionally installed tests
  * Fixed caching_sha2_password and sha256_password raise TypeError on PY2
    (#700, #702)
  * Change default charset from latin1 to utf8mb4.  (because MySQL 8 changed) (#692)
  * Support sha256_password and caching_sha2_password auth method (#682)
  * Add cryptography dependency, because it's needed for new auth methods.
  * Remove deprecated `no_delay` option (#694)
  * Support connection attributes (#679)
  * Map LOCK_DEADLOCK to OperationalError (#693)</changelog>
  <changelog author="pgajdos@suse.com" date="1591272000">- test package with mariadb
- added patches
  https://github.com/PyMySQL/PyMySQL/commit/a500fcd64d4500417540a2a2ff7b16a88d1872ad
  + python-PyMySQL-no-unittest2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 0.10.0:
  * MariaDB ed25519 auth is supported.
  * Python 3.4 support is dropped.
  * Context manager interface is removed from `Connection`. It will be added
    with different meaning.
  * MySQL warnings are not shown by default because many user report issue to
    PyMySQL issue tracker when they see warning. You need to call "SHOW WARNINGS"
    explicitly when you want to see warnings.
  * Formatting of float object is changed from "3.14" to "3.14e0".
  * Use cp1252 codec for latin1 charset.
  * Fix decimal literal.
  * TRUNCATED_WRONG_VALUE_FOR_FIELD, and ILLEGAL_VALUE_FOR_TYPE are now
    DataError instead of InternalError.
- remove python-PyMySQL-no-unittest2.patch (upstream)</changelog>
  <changelog author="hpj@urpla.net" date="1600862400">- disable testing for Leaps
  mariadb-rpm-macros not available or not sufficient</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- udpate to 0.10.1:
  * Fix missing import of ProgrammingError. (#878)
  * Fix auth switch request handling. (#890)</changelog>
  <changelog author="dmueller@suse.com" date="1619092800">- update to 1.0.2:
  * Fix `user`, `password`, `host`, `database` are still positional arguments.
    All arguments of `connect()` are now keyword-only. (#941)
  * Stop emitting DeprecationWarning for use of ``db`` and ``passwd``.
    Note that they are still deprecated. (#939)
  * Add ``python_requires="&gt;=3.6"`` to setup.py. (#936)
  * Python 2.7 and 3.5 are not supported.
  * ``connect()`` uses keyword-only arguments. User must use keyword argument.
  * ``connect()`` kwargs ``db`` and ``passwd`` are now deprecated; Use ``database`` and ``password`` instead.
  * old_password authentication method (used by MySQL older than 4.1) is not supported.
  * MySQL 5.5 and MariaDB 5.5 are not officially supported, although it may still works.
  * Removed ``escape_dict``, ``escape_sequence``, and ``escape_string`` from ``pymysql``
    module. They are still in ``pymysql.converters``.
  * Connection supports context manager API. ``__exit__`` closes the connection. (#886)
  * Add MySQL Connector/Python compatible TLS options (#903)
  * Major code cleanup; PyMySQL now uses black and flake8.</changelog>
  <changelog author="mcepl@suse.com" date="1627473600">- Fix databases.json used for tests.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1665662400">- Skip a test that is failing due to character set fun and games.</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 1.0.3:
  * Dropped support of end of life MySQL version 5.6
  * Dropped support of end of life MariaDB versions below 10.3
  * Dropped support of end of life Python version 3.6</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690977600">- disable test_json broken with latest mariadb (11.0)
- update to 1.1.0:
  * Remove redundant wheel dep from pyproject.toml by @mgorny in #1099
  * ci: Fix black options by @methane in #1109
  * Remove unused function by @methane in #1108
  * Expose Cursor.warning_count by @Nothing4You in #1056
  * Add constants and tests related to query timeouts by @Nothing4You in #1033
  * Fix SSCursor raising query timeout error on wrong query on MySQL DB by @Nothing4You in #1035
  * Make Cursor an iterator by @sanchezg in #995
  * ci: Update CodeQL workflow by @methane in #1110
  * Use Ruff instead of flake8 by @methane in #1112
  * Use Codecov instead of coveralls. by @methane in #1113
  * optionfile: Replace _ with - by @methane in #1114
  * Cursor.fetchall() always return list. by @methane in #1115
  * Fix LOAD DATA LOCAL INFILE write EOF packet on closed connection. by @methane in #1116
  * Deprecate Cursor.Error access by @methane in #1117
  * Run pyupgrade by @methane in #1118
  * Add collation option and set_character_set() to Connection by @methane in #1119
  * CI: Run Django test by @methane in #1121
  * Release v1.1.0rc1 by @methane in #1122
  * Bump mariadb version by @grooverdan in #1123
  * Configure Renovate by @renovate in #1124
  * Make charset="utf8" use utf8mb4. by @methane in #1127
  * Add codecov.yml by @methane in #1128
  * Release v1.1.0rc2 by @methane in #1129
  * Release v1.1.0 by @methane in #1130</changelog>
  <changelog author="ecsos@opensuse.org" date="1692187200">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="daniel.garcia@suse.com" date="1716552000">- Add CVE-2024-36039.patch, forbid dict parameter
  (bsc#1225070, gh#PyMySQL/PyMySQL@521e40050cb3)</changelog>
</package>
<package pkgid="6128b5505c5675f8669b166901aefbacdb4ad740206121ac42efc3e1107f73cf" name="python-Pygments" arch="src">
  <version epoch="0" ver="2.15.1" rel="150400.7.7.4"/>
  <changelog author="benoit.monin@gmx.fr" date="1599998400">- update to version 2.7.0:
  * Added lexers:
    + Arrow (PR#1481, PR#1499)
    + BARE (PR#1488)
    + Devicetree (PR#1434)
    + F* (PR#1409)
    + GDScript (PR#1457)
    + Pointless (PR#1494)
    + PromQL (PR#1506)
    + PsySH (PR#1438)
    + Singularity (PR#1285)
    + TiddlyWiki5 (PR#1390)
    + TNT (PR#1414)
    + YANG (PR#1408, PR#1428)
  * Updated lexers:
    + APL (PR#1503)
    + C++ (PR#1350, which also fixes: #1222, #996, #906, #828,
    [#1162], #1166, #1396)
    + Chapel (PR#1423)
    + CMake (#1491)
    + CSound (#1509)
    + Cython (PR#1507)
    + Dart (PR#1449)
    + Fennel (PR#1535)
    + Fortran (PR#1442)
    + GAS (PR#1530)
    + HTTP (PR#1432, #1520, PR#1521)
    + Inform 6 (PR#1461)
    + Javascript (PR#1533)
    + JSON (#1065, PR#1528)
    + Lean (PR#1415)
    + Matlab (PR#1399)
    + Markdown (#1492, PR#1495)
    + MySQL (#975, #1063, #1453, PR#1527)
    + NASM (PR#1465)
    + Nim (PR#1426)
    + PostgreSQL (PR#1513)
    + PowerShell (PR#1398, PR#1497)
    + Protobuf (PR#1505)
    + Robot (PR#1480)
    + SQL (PR#1402)
    + SystemVerilog (PR#1436, PR#1452, PR#1454, PR#1460, PR#1462,
    PR#1463, PR#1464, PR#1471, #1496, PR#1504)
    + TeraTerm (PR#1337)
    + XML (#1502)
  * Added a new filter for math symbols (PR#1406)
  * The Kconfig lexer will match Kconfig derivative names now
    (PR#1458)
  * Improved HTML formatter output (PR#1500)
  * .markdown is now recognized as an extension for Markdown files
    (PR#1476)
  * Fixed line number colors for Solarized (PR#1477, #1356)
  * Improvements to exception handling (PR#1478)
  * Improvements to tests (PR#1532, PR#1533, PR#1539)
  * Various code cleanups (PR#1536, PR#1537, PR#1538)
- remove unnecessary executable bit on all source files</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1600344000">- update to version 2.7.1:
  * Fixed a regression in the JSON lexer (#1544)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1603540800">- update to version 2.7.2:
  * Updated lexers:
    + Latex (PR#1517, #1516)
    + LLVM (PR#1565)
    + SPARQL (PR#1559)
  * Fixed Python console/traceback lexer problems with custom
    exceptions without messages (#1548)
  * Allow loading ttc fonts on Mac/image formatter (#1223)
  * Improve analyze_text across a variety of lexers (PR#1549)
  * Removed CSS rule which forced the vertical padding to 0 for
    line numbers (PR#1583, #1579)
  * Fix TNTLexer crashing on unexpected EOL (#1568, PR#1570)
  * regexlint can be now run locally as part of tox tests (PR#1557)
  * Fix typos (PR#1550, #1562)
  * Add Python 3.9 as a supported version (PR#1554)
- drop shebang removal in _usd_builtins.py: fixed upstream</changelog>
  <changelog author="mcepl@suse.com" date="1607083200">- Revert to 2.6.1 (higher version break python-Pelican).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Update to 2.7.4 (all what was in the update to 2.7.2 and above
  it) (CVE-2021-20270, bsc#1183169, CVE-2021-27291, bsc#1184812):
  * drops cve_2021_20270.patch, cve_2021_27291.patch in older dists
  - Updated lexers:
  * Ada (#1581)
  * HTML (#1615, #1614)
  * Java (#1594, #1586)
  * JavaScript (#1605, #1589, #1588)
  * JSON (#1569 -- this is a complete rewrite)
  * Lean (#1601)
  * LLVM (#1612)
  * Mason (#1592)
  * MySQL (#1555, #1551)
  * Rust (#1608)
  * Turtle (#1590, #1553)
  - Deprecated JsonBareObjectLexer, which is now identical to
    JsonLexer (#1600)
  - The ``ImgFormatter`` now calculates the exact character
    width, which fixes some issues with overlapping text (#1213,
    [#1611])
  - Documentation fixes (#1609, #1599, #1598)
  - Fixed duplicated Juttle language alias (#1604, #1606)
  - Added support for Kotlin scripts (#1587)
  - Removed CSS rule which forced margin to 0</changelog>
  <changelog author="mcepl@suse.com" date="1626350400">- Update to 2.9.0:
  - This time the list of changes is truly too long, take a look
    at https://github.com/pygments/pygments/blob/master/CHANGES.</changelog>
  <changelog author="schubi@suse.de" date="1631188800">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="mliska@suse.cz" date="1641211200">- Update to 2.11.1:
  https://github.com/pygments/pygments/blob/master/CHANGES
- Remove one test as it requires wcag-contrast-ratio Python package.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1641988800">- update to 2.11.2:
  * Updated lexers:
    + C-family: Fix incorrect handling of labels (#2022, #1996,
    [#1182])
    + Java: Fixed an issue with record keywords result in Error
    tokens in some cases (#2018)
  * Fix links to line numbers not working correctly (#2014)
  * Remove underline from Whitespace style in the Tango theme
    (#2020)
  * Fix IRC and Terminal256 formatters not backtracking correctly
    for custom token types, resulting in some unstyled tokens
    (#1986)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1644148800">- backport elpi_fix_catastrophic_backtracking.patch:
  fix build getting stuck when running the tests
- switch prep stage to autosetup
- remove commented-out shebang removal</changelog>
  <changelog author="dmueller@suse.com" date="1652616000">- update to 2.12.0:
  - Added lexers:
  * Cplint (#2045)
  * Macaulay2 (#1791)
  * Minecraft (#2107)
  * Qlik (#1925)
  * ``UnixConfigLexer`` for "colon-separated" config files, like ``/etc/passwd`` (#2112)
  - Updated lexers:
  * Agda: Update keyword list (#2017)
  * C family: Fix identifiers after ``case`` statements (#2084)
  * Clojure: Highlight ratios (#2042)
  * Csound: Update to 6.17 (#2064)
  * CSS: Update the list of properties (#2113)
  * Elpi:
  - Fix catastrophic backtracking (#2053, #2061)
  - Fix handling of ``-&gt;`` (#2028)
  * Futhark: Add missing tokens (#2118)
  * Gherkin: Add ``But`` (#2046)
  * Inform6: Update to 6.36 (#2050)
  * LilyPond:
  - Fix incorrect lexing of names containing a built-in (#2071)
  - Fix properties containing dashes (#2099)
  * PHP: Update builtin function and keyword list (#2054, #2056)
  * Scheme: Various improvements (#2060)
  * Spice: Update the keyword list, add new types (#2063, #2067)
  * Terraform:
  - Support non-idiomatic comments (#2065, #2066)
  - Fix class name lexing (#2097)
  - Add ``plugins`` argument to ``get_all_lexers()``.
  - Bump minimal Python version to 3.6 (#2059)
  - Fix multiple lexers marking whitespace as ``Text`` (#2025)
  - Remove various redundant uses of ``re.UNICODE`` (#2058)
  - Associate ``.resource`` with the Robot framework (#2047)
  - Associate ``.cljc`` with Clojure (#2043)
  - Associate ``.tpp`` with C++ (#2031)
  - Remove traces of Python 2 from the documentation (#2039)
  - The ``native`` style was updated to meet the WCAG AAA contrast guidelines (#2038)
  - Fix various typos (#2030)
  - Fix ``Groff`` formatter not inheriting token styles correctly (#2024)
  - Various improvements to the CI (#2036)
  - The Ada lexer has been moved to a separate file (#2117)
- drop elpi_fix_catastrophic_backtracking.patch: upstream</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Don't fall back to setuptools but to importlib-metadata for
  plugin loading. (If a package for 15.X would be build, but
  Pytest 7 is required for testing -- gh#pygments/pygments#2080)</changelog>
  <changelog author="mcepl@suse.com" date="1658145600">- Removing a test file is too much a hack for me</changelog>
  <changelog author="mcepl@suse.com" date="1658145601">- Add BR of wcag-contrast-ratio to enable more tests.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1660824000">- update to 2.13.0:
  * Added lexers:
    + COMAL-80 (#2180)
    + JMESPath (#2174, #2175, #2179, #2182)
    + Sql+Jinja (#2148)
  * Updated lexers:
    + Ada: support Ada 2022 (#2121); disable recognition of
    namespaces because it disturbs lexing of aspects (#2125)
    + Agda: allow straight quotes in module names (#2163)
    + C family (C, C++ and many others): allow comments between
    elements of function headers, e.g. between the arguments and
    the opening brace for the body (#1891)
    + C++: Resolve several cases of Error tokens (#2207, #2208)
    + Coq: add some common keywords, improve recognition of Set and
    qualified identifiers (#2158)
    + F*: Allow C-style comments anywhere in a line
    + Fortran: fix catastrophic backtracking with backslashes in
    strings (#2194)
    + Go: add support for generics (#2167)
    + Inform: update for version 6.40 (#2190)
    + Isabelle: recognize cartouches (#2089)
    + Java: support multiline strings aka. text blocks (#2132)
    + Kotlin: add value modifier (#2142)
    + LilyPond: add some missing builtins
    + Macaulay2: update builtins (#2139)
    + Matlab session: fix traceback when a line continuation
    ellipsis appears in the output (#2166)
    + .NET: add aliases for LibreOffice Basic, OpenOfficeBasic and
    StarOffice Basic (#2170)
    + Nim: use Name.Builtin instead of Keyword.Type (#2136)
    + PHP: fix \"$var\" inside strings (#2105)
    + Python: only recognize \N, \u and \U escape sequences in
    string literals, but not in bytes literals where they are not
    supported (#2204)
    + Tcl: support ${name} variables (#2145)
    + Terraform: accept leading whitespace for &lt;&lt; heredoc
    delimiters (#2162)
    + Teraterm: Various improvements (#2165)
    + Spice: add support for the recently added features including
    more builtin functions and bin, oct, hex number formats
    (#2206)
  * Added styles:
    + GitHub dark (#2192)
    + StarOffice (#2168)
    + Nord (nord and nord-darker; #2189, #1799, #1678)
  * Pygments now tries to use the importlib.metadata module to
    discover plugins instead of the slower pkg_resources (#2155).
  * Silently ignore BrokenPipeError in the command-line interface
    (#2193).
  * The HtmlFormatter now uses the linespans attribute for
    anchorlinenos if the lineanchors attribute is unset (#2026).
  * The highlight, lex and format functions no longer wrongly
    report "argument must be a lexer/formatter instance, not a
    class" in some cases where this is not the actual problem
    (#2123).
  * Fix warnings in doc build (#2124).
  * The codetagify filter now recognizes FIXME tags by default
    (#2150).
  * The pygmentize command now recognizes if the COLORTERM
    environment variable is set to a value indicating that
    true-color support is available.  In that case, it uses the
    TerminalTrueColorFormatter by default (#2160)
  * Remove redundant caches for filename patterns (#2153)
  * Use new non-deprecated Pillow API for text bounding box in
    ImageFormatter (#2198)
  * Remove default_style (#930, #2183)
  * Stop treating DeprecationWarnings as errors in the unit tests
    (#2196)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1672660800">- update to 2.14.0:
  * Added lexers:
    + Arturo (#2259)
    + GAP session (#2211)
    + Fift (#2249)
    + func (#2232)
    + Jsonnet (#2239)
    + Minecraft schema (#2276)
    + MIPS (#2228)
    + Phix (#2222)
    + Portugol (#2300)
    + TL-b (#2247)
    + World of Warcraft TOC format (#2244, #2245)
    + Wren (#2271)
  * Updated lexers:
    + Abap: Update keywords (#2281)
    + Alloy: Update for Alloy 6 (#1963)
    + C family (C, C++ and many others):
  - Fix an issue where a chunk would be wrongly recognized as a
    function definition due to braces in comments (#2210)
  - Improve parantheses handling for function definitions
    (#2207, #2208)
    + C#: Fix number and operator recognition (#2256, #2257)
    + CSound: Updated builtins (#2268)
    + F#: Add .fsx file extension (#2282)
    + gas (GNU assembler): recognize braces as punctuation (#2230)
    + HTTP: Add CONNECT keyword (#2242)
    + Inform 6: Fix lexing of properties and doubles (#2214)
    + INI: Allow comments that are not their own line
    (#2217, #2161)
    + Java properties: Fix issue with whitespace-delimited keys,
    support comments starting with ! and escapes, no longer
    support undocumented ; and // comments (#2241)
    + LilyPond: Improve heuristics, add \maxima duration (#2283)
    + LLVM: Add opaque pointer type (#2269)
    + Macaulay2: Update keywords (#2305)
    + Minecraft-related lexers (SNB and Minecraft function) moved
    to pygments.lexers.minecraft (#2276)
    + Nim: General improvements (#1970)
    + Nix: Fix single quotes inside indented strings (#2289)
    + Objective J: Fix catastrophic backtracking (#2225)
    + NASM: Add support for SSE/AVX/AVX-512 registers as well as
    'rel' and 'abs' address operators (#2212)
    + Powershell:
  - Add local: keyword (#2254)
  - Allow continuations without markers (#2262, #2263)
    + Solidity: Add boolean operators (#2292)
    + Spice: Add enum keyword and fix a bug regarding binary,
    hexadecimal and octal number tokens (#2227)
    + YAML: Accept colons in key names (#2277)
  * Fix make mapfiles when Pygments is not installed in editable
    mode (#2223)
  * Support more filetypes and compression types in autopygmentize
    (#2219)
  * Merge consecutive tokens in Autohotkey, Clay (#2248)
  * Add .nasm as a recognized file type for NASM (#2280)
  * Add *Spec.hs as a recognized file type for HSpec (#2308)
  * Add *.pyi (for typing stub files) as a recognized file type for
    Python (#2331)
  * The HTML lexer no longer emits empty spans for whitespace
    (#2304)
  * Fix IRCFormatter inserting linenumbers incorrectly (#2270)
- set minimum python version to 3.6:
  increased upstream -- gh#pygments/pygments#2059
- remove lxml BuildRequires:
  dropped upstream -- gh#pygments/pygments#2301
- remove skip_python2: python &gt;= 3.6 is already required
- drop python_module macro definition: provided by
  python-rpm-macros</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1681128000">- update to 2.15.0:
  * Added lexers:
    + Carbon (#2362, #2365, #2366, #2367, #2368, #2369, #2370)
    + Dax (#2335, #2345)
    + MediaWiki Wikitext (#2373, #827)
    + PostgreSQL Explain (#2398)
    + WGSL (WebGPU Shading Language) (#2386)
    + X++ (#2339)
  * Updated lexers:
    + AMDGPU: Add support for scratch_ instructions, the attr*.*
    argument, as well as the off modifier (#2327).
    + APDL: Miscellaneous improvements (#2314)
    + bash/tcsh:
  - Move break to keywords (#2377)
  - Improve bash math expansion lexing (#2255, #2353)
    + Chapel: Support attributes (#2376)
    + CMake: Implement bracket style comments (#2338, #2354)
    + CSS: Improve lexing of numbers inside function calls (#2382,
    [#2383])
    + diff: Support normal diff syntax, as opposed to unified diff
    syntax (#2321)
    + GLSL, HLSL:
  - Support line continuations in preprocessor code (#2350)
  - Improve preprocessor directive handling (#2357)
    + LilyPond: minor update of builtins
    + PHP: support attributes (#2055, #2347, #2360), fix anonymous
    classes without parameters (#2359), improve lexing of
    variable variable syntax (#2358)
    + Python:
  - Add missing builtins (#2334)
  - Fix inconsistent lexing of None (#2406)
    + Rebol/Red: Don’t require script headers (#2348, #2349)
    + Spice: Update keywords (#2336)
    + SQL+Jinja (analyse_text method): Fix catastrophic
    backtracking (#2355)
    + Terraform: Add hcl alias (#2375)
  * Declare support for Python 3.11 and drop support for Python 3.6
    (#2324).
  * Update native style to improve contrast (#2325).
  * Update github-dark` style to match latest Primer style (#2401)
  * Revert a change that made guessing lexers based on file names
    slower on Python 3.10 and older (#2328).
  * Fix some places where a locale-dependent encoding could
    unintentionally be used instead of UTF-8 (#2326).
  * Fix Python traceback handling (#2226, #2329).
  * Groff formatter: sort color definitions for reproducibility
    (#2343)
  * Move project metadata to pyproject.toml, remove setup.py and
    setup.cfg (#2342)
  * The top-level Makefile has been removed.
- increase required python version to 3.7
- set a minimum version for setuptools to match the requirement
  from upstream
- since setup.py is gone:
  * require pip and wheel to build
  * use pyproject macros to build and install</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1681905600">- update to 2.15.1:
  * Updated lexers:
    + Java properties: Fix catastrophic backtracking (#2356, #2404)
  * Fix Python console traceback lexing being too strict
    and sometimes reordering output (#2407, #2410, #2412)</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="daeb0fcc4d80b14f980000d110ed559cb9f13c3f5e4834f3a8d5a59126e79e2f" name="python-Twisted" arch="src">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="5e935c8f8a983d05c7016ffc6ce661d73d88f86ed9a66ff51b29607de057980c" name="python-Twisted" arch="src">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="d364e858728ff7f0810c0e9278fccd53384c39990442cee264c6fe8526b90541" name="python-Werkzeug" arch="src">
  <version epoch="0" ver="2.3.6" rel="150400.6.9.1"/>
  <changelog author="steven.kowalik@suse.com" date="1584014400">- Update to 1.0.0:
  * Drop support for Python 3.4. (#1478)
  * Remove code that issued deprecation warnings in version 0.15. (#1477)
  * Remove most top-level attributes provided by the werkzeug module in favor of direct imports. For example, instead of import werkzeug; werkzeug.url_quote, do from werkzeug.urls import url_quote. Install version 0.16 first to see deprecation warnings while upgrading. #2, #1640
  * Added utils.invalidate_cached_property() to invalidate cached properties. (#1474)
  * Directive keys for the Set-Cookie response header are not ignored when parsing the Cookie request header. This allows cookies with names such as “expires” and “version”. (#1495)
  * Request cookies are parsed into a MultiDict to capture all values for cookies with the same key. cookies[key] returns the first value rather than the last. Use cookies.getlist(key) to get all values. parse_cookie also defaults to a MultiDict. #1562, #1458
  * Add charset=utf-8 to an HTTP exception response’s CONTENT_TYPE header. (#1526)
  * The interactive debugger handles outer variables in nested scopes such as lambdas and comprehensions. #913, #1037, #1532
  * The user agent for Opera 60 on Mac is correctly reported as “opera” instead of “chrome”. #1556
  * The platform for Crosswalk on Android is correctly reported as “android” instead of “chromeos”. (#1572)
  * Issue a warning when the current server name does not match the configured server name. #760
  * A configured server name with the default port for a scheme will match the current server name without the port if the current scheme matches. #1584
  * InternalServerError has a original_exception attribute that frameworks can use to track the original cause of the error. #1590
  * Headers are tested for equality independent of the header key case, such that X-Foo is the same as x-foo. #1605
  * http.dump_cookie() accepts 'None' as a value for samesite. #1549
  * set_cookie() accepts a samesite argument. #1705
  * Support the Content Security Policy header through the Response.content_security_policy data structure. #1617
  * LanguageAccept will fall back to matching “en” for “en-US” or “en-US” for “en” to better support clients or translations that only match at the primary language tag. #450, #1507
  * MIMEAccept uses MIME parameters for specificity when matching. #458, #1574
  * If the development server is started with an SSLContext configured to verify client certificates, the certificate in PEM format will be available as environ["SSL_CLIENT_CERT"]. #1469
  * is_resource_modified will run for methods other than GET and HEAD, rather than always returning False. #409
  * SharedDataMiddleware returns 404 rather than 500 when trying to access a directory instead of a file with the package loader. The dependency on setuptools and pkg_resources is removed. #1599
  * Add a response.cache_control.immutable flag. Keep in mind that browser support for this Cache-Control header option is still experimental and may not be implemented. #1185
  * Optional request log highlighting with the development server is handled by Click instead of termcolor. #1235
  * Optional ad-hoc TLS support for the development server is handled by cryptography instead of pyOpenSSL. #1555
  * FileStorage.save() supports pathlib and PEP 519 PathLike objects. #1653
  * The debugger security pin is unique in containers managed by Podman. #1661
  * Building a URL when host_matching is enabled takes into account the current host when there are duplicate endpoints with different hosts. #488
  * The 429 TooManyRequests and 503 ServiceUnavailable HTTP exceptions takes a retry_after parameter to set the Retry-After header. #1657
  * Map and Rule have a merge_slashes option to collapse multiple slashes into one, similar to how many HTTP servers behave. This is enabled by default. #1286, #1694
  * Add HTTP 103, 208, 306, 425, 506, 508, and 511 to the list of status codes. #1678
  * Add update, setlist, and setlistdefault methods to the Headers data structure. extend method can take MultiDict and kwargs. #1687, #1697
  * The development server accepts paths that start with two slashes, rather than stripping off the first path segment. #491
  * Add access control (Cross Origin Request Sharing, CORS) header properties to the Request and Response wrappers. #1699
  * Accept values are no longer ordered alphabetically for equal quality tags. Instead the initial order is preserved. #1686
  * Added Map.lock_class attribute for alternative implementations. #1702
  * Support matching and building WebSocket rules in the routing system, for use by async frameworks. #1709
  * Range requests that span an entire file respond with 206 instead of 200, to be more compliant with RFC 7233. This may help serving media to older browsers. #410, #1704
  * The SharedDataMiddleware default fallback_mimetype is application/octet-stream. If a filename looks like a text mimetype, the utf-8 charset is added to it. This matches the behavior of BaseResponse and Flask’s send_file(). #1689
- Remove patch 0001_create_a_thread_to_reap_death_process.patch, not required
- Add pytest-timeout to BuildRequires</changelog>
  <changelog author="arun@gmx.de" date="1586001600">- specfile:
  * be more specific in %files section
  * add sortedcontainers for tests
- update to version 1.0.1:
  * Make the argument to RequestRedirect.get_response
    optional. :issue:`1718`
  * Only allow a single access control allow origin value. :pr:`1723`
  * Fix crash when trying to parse a non-existent Content Security
    Policy header. :pr:`1731`
  * http_date zero fills years &lt; 1000 to always output four
    digits. :issue:`1739`
  * Fix missing local variables in interactive debugger
    console. :issue:`1746`
  * Fix passing file-like objects like io.BytesIO to
    FileStorage.save. :issue:`1733`</changelog>
  <changelog author="mmachova@suse.com" date="1610452800">- Workaround pytest 6.2</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- skip building for Python 2.x
- updated upstream project URL
- Update to 2.0.1
  * Version 2.0.1
  - Fix type annotation for send_file max_age callable. Don’t pass
    pathlib.Path to max_age. #2119
  - Mark top-level names as exported so type checking understands imports
    in user projects. #2122
  - Fix some types that weren’t available in Python 3.6.0. #2123
  - cached_property is generic over its return type, properties decorated
    with it report the correct type. #2113
  - Fix multipart parsing bug when boundary contains special regex
    characters. #2125
  - Type checking understands that calling headers.get with a string
    default will always return a string. #2128
  - If HTTPException.description is not a string, get_description will
    convert it to a string. #2115
  * Version 2.0.0
  - Drop support for Python 2 and 3.5. #1693
  - Deprecate utils.format_string(), use string.Template instead. #1756
  - Deprecate utils.bind_arguments() and utils.validate_arguments(),
    use Signature.bind() and inspect.signature() instead. #1757
  - Deprecate utils.HTMLBuilder. #1761
  - Deprecate utils.escape() and utils.unescape(), use MarkupSafe instead. #1758
  - Deprecate the undocumented python -m werkzeug.serving CLI. #1834
  - Deprecate the environ["werkzeug.server.shutdown"] function that is
    available when running the development server. #1752
  - Deprecate the useragents module and the built-in user agent parser. Use
    a dedicated parser library instead by subclassing user_agent.UserAgent
    and setting Request.user_agent_class. #2078
  - Remove the unused, internal posixemulation module. #1759
  - All datetime values are timezone-aware with tzinfo=timezone.utc. This
    applies to anything using http.parse_date: Request.date,
    .if_modified_since, .if_unmodified_since; Response.date, .expires,
    .last_modified, .retry_after; parse_if_range_header, and IfRange.date.
    When comparing values, the other values must also be aware, or these
    values must be made naive. When passing parameters or setting
    attributes, naive values are still assumed to be in UTC. #2040
  - Merge all request and response wrapper mixin code into single Request
    and Response classes. Using the mixin classes is no longer necessary
    and will show a deprecation warning. Checking isinstance or issubclass
    against BaseRequest and BaseResponse will show a deprecation warning
    and check against Request or Response instead. #1963
  - JSON support no longer uses simplejson if it’s installed. To use
    another JSON module, override Request.json_module and
    Response.json_module. #1766
  - Response.get_json() no longer caches the result, and the cache
    parameter is removed. #1698
  - Response.freeze() generates an ETag header if one is not set. The
    no_etag parameter (which usually wasn’t visible anyway) is no longer
    used. #1963
  - Add a url_scheme argument to build() to override the bound scheme. #1721
  - Passing an empty list as a query string parameter to build() won’t
    append an unnecessary ?. Also drop any number of None items in a list.
    [#1992]
  - When passing a Headers object to a test client method or
    EnvironBuilder, multiple values for a key are joined into one comma
    separated value. This matches the HTTP spec on multi-value headers.
    [#1655]
  - Setting Response.status and status_code uses identical parsing and
    error checking. #1658, #1728
  - MethodNotAllowed and RequestedRangeNotSatisfiable take a response
    kwarg, consistent with other HTTP errors. #1748
  - The response generated by Unauthorized produces one WWW-Authenticate
    header per value in www_authenticate, rather than joining them into a
    single value, to improve interoperability with browsers and other
    clients. #1755
  - If parse_authorization_header can’t decode the header value, it returns
    None instead of raising a UnicodeDecodeError. #1816
  - The debugger no longer uses jQuery. #1807
  - The test client includes the query string in REQUEST_URI and RAW_URI. #1781
  - Switch the parameter order of default_stream_factory to match the order
    used when calling it. #1085
  - Add send_file function to generate a response that serves a file.
    Adapted from Flask’s implementation. #265, #1850
  - Add send_from_directory function to safely serve an untrusted path
    within a trusted directory. Adapted from Flask’s implementation. #1880
  - send_file takes download_name, which is passed even if
    as_attachment=False by using Content-Disposition: inline. download_name
    replaces Flask’s attachment_filename. #1869
  - send_file sets conditional=True and max_age=None by default.
    Cache-Control is set to no-cache if max_age is not set, otherwise
    public. This tells browsers to validate conditional requests instead of
    using a timed cache. max_age=None replaces Flask’s cache_timeout=43200.
    [#1882]
  - send_file can be called with etag="string" to set a custom ETag instead
    of generating one. etag replaces Flask’s add_etags. #1868
  - send_file sets the Content-Encoding header if an encoding is returned
    when guessing mimetype from download_name. #3896
  - Update the defaults used by generate_password_hash. Increase PBKDF2
    iterations to 260000 from 150000. Increase salt length to 16 from 8.
    Use secrets module to generate salt. #1935
  - The reloader doesn’t crash if sys.stdin is somehow None. #1915
  - Add arguments to delete_cookie to match set_cookie and the attributes
    modern browsers expect. #1889
  - utils.cookie_date is deprecated, use utils.http_date instead. The value
    for Set-Cookie expires is no longer “-” delimited. #2040
  - Use request.headers instead of request.environ to look up header attributes. #1808
  - The test Client request methods (client.get, etc.) always return an
    instance of TestResponse. In addition to the normal behavior of
    Response, this class provides request with the request that produced
    the response, and history to track intermediate responses when
    follow_redirects is used. #763, #1894
  - The test Client request methods takes an auth parameter to add an
    Authorization header. It can be an Authorization object or a (username,
    password) tuple for Basic auth. #1809
  - Calling response.close() on a response from the test Client will close
    the request input stream. This matches file behavior and can prevent a
    ResourceWarning in some cases. #1785
  - EnvironBuilder.from_environ decodes values encoded for WSGI, to avoid
    double encoding the new values. #1959
  - The default stat reloader will watch Python files under
    non-system/virtualenv sys.path entries, which should contain most user
    code. It will also watch all Python files under directories given in
    extra_files. #1945
  - The reloader ignores __pycache__ directories again. #1945
  - run_simple takes exclude_patterns a list of fnmatch patterns that will
    not be scanned by the reloader. #1333
  - Cookie names are no longer unquoted. This was against RFC 6265 and
    potentially allowed setting __Secure prefixed cookies. #1965
  - Fix some word matches for user agent platform when the word can be a substring. #1923
  - The development server logs ignored SSL errors. #1967
  - Temporary files for form data are opened in rb+ instead of wb+ mode for
    better compatibility with some libraries. #1961
  - Use SHA-1 instead of MD5 for generating ETags and the debugger pin, and
    in some tests. MD5 is not available in some environments, such as FIPS
    140. This may invalidate some caches since the ETag will be different.
    [#1897]
  - Add Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy
    response header properties. #2008
  - run_simple tries to show a valid IP address when binding to all
    addresses, instead of 0.0.0.0 or ::. It also warns about not running
    the development server in production in this case. #1964
  - Colors in the development server log are displayed if Colorama is
    installed on Windows. For all platforms, style support no longer
    requires Click. #1832
  - A range request for an empty file (or other data with length 0) will
    return a 200 response with the empty file instead of a 416 error. #1937
  - New sans-IO base classes for Request and Response have been extracted
    to contain all the behavior that is not WSGI or IO dependent. These are
    not a public API, they are part of an ongoing refactor to let ASGI
    frameworks use Werkzeug. #2005
  - Parsing multipart/form-data has been refactored to use sans-io
    patterns. This should also make parsing forms with large binary file
    uploads significantly faster. #1788, #875
  - LocalProxy matches the current Python data model special methods,
    including all r-ops, in-place ops, and async. __class__ is proxied, so
    the proxy will look like the object in more cases, including
    isinstance. Use issubclass(type(obj), LocalProxy) to check if an object
    is actually a proxy. #1754
  - Local uses ContextVar on Python 3.7+ instead of threading.local. #1778
  - request.values does not include form for GET requests (even though GET
    bodies are undefined). This prevents bad caching proxies from caching
    form data instead of query strings. #2037
  - The development server adds the underlying socket to environ as
    werkzeug.socket. This is non-standard and specific to the dev server,
    other servers may expose this under their own key. It is useful for
    handling a WebSocket upgrade request. #2052
  - URL matching assumes websocket=True mode for WebSocket upgrade requests. #2052
  - Updated UserAgentParser to handle more cases. #1971
  - werzeug.DechunkedInput.readinto will not read beyond the size of the buffer. #2021
  - Fix connection reset when exceeding max content size. #2051
  - pbkdf2_hex, pbkdf2_bin, and safe_str_cmp are deprecated. hashlib and
    hmac provide equivalents. #2083
  - invalidate_cached_property is deprecated. Use del obj.name instead. #2084
  - Href is deprecated. Use werkzeug.routing instead. #2085
  - Request.disable_data_descriptor is deprecated. Create the request with
    shallow=True instead. #2085
  - HTTPException.wrap is deprecated. Create a subclass manually instead. #2085</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.0.2:
  * Handle multiple tokens in ``Connection`` header when routing
    WebSocket requests.
  * Set the debugger pin cookie secure flag when on https.
  * Fix type annotation for ``MultiDict.update`` to accept iterable
    values :pr:`2142`
  * Prevent double encoding of redirect URL when ``merge_slash=True``
    for ``Rule.match``.
  * ``CombinedMultiDict.to_dict`` with ``flat=False`` considers all
    component dicts when building value lists. :issue:`2189`
  * ``send_file`` only sets a detected ``Content-Encoding`` if
    ``as_attachment`` is disabled to avoid browsers saving
    decompressed ``.tar.gz`` files.
  * Fix type annotations for ``TypeConversionDict.get`` to not return an
    ``Optional`` value if both ``default`` and ``type`` are not
    ``None``.
  * Fix type annotation for routing rule factories to accept
    ``Iterable[RuleFactory]`` instead of ``Iterable[Rule]`` for the
    ``rules`` parameter. :issue:`2183`
  * Add missing type annotation for ``FileStorage.__getattr__``
  * The debugger pin cookie is set with ``SameSite`` set to ``Strict``
    instead of ``None`` to be compatible with modern browser security.
  * Type annotations use ``IO[bytes]`` and ``IO[str]`` instead of
    ``BinaryIO`` and ``TextIO`` for wider type compatibility.
  * Ad-hoc TLS certs are generated with SAN matching CN. :issue:`2158`
  * Fix memory usage for locals when using Python 3.6 or pre 0.4.17
    greenlet versions. :pr:`2212`
  * Fix type annotation in ``CallbackDict``, because it is not
    utilizing a bound TypeVar. :issue:`2235`
  * Fix setting CSP header options on the response. :pr:`2237`
  * Fix an issue with with the interactive debugger where lines would
    not expand on click for very long tracebacks. :pr:`2239`
  * The interactive debugger handles displaying an exception that does
    not have a traceback, such as from ``ProcessPoolExecutor``.</changelog>
  <changelog author="dmueller@suse.com" date="1644926400">- update to 2.0.3:
  * ``ProxyFix`` supports IPv6 addresses.
  * Type annotation for ``Response.make_conditional``,
    ``HTTPException.get_response``, and ``Map.bind_to_environ`` accepts
    ``Request`` in addition to ``WSGIEnvironment`` for the first
    parameter.
  * Fix type annotation for ``Request.user_agent_class``.
  * Accessing ``LocalProxy.__class__`` and ``__doc__`` on an unbound
    proxy returns the fallback value instead of a method object.
  * Redirects with the test client set ``RAW_URI`` and ``REQUEST_URI``
    correctly.</changelog>
  <changelog author="mcepl@suse.com" date="1650369600">- Update to 2.1.1:
  - ResponseCacheControl.s_maxage converts its value to an int,
    like max_age.
  - Drop support for Python 3.6.
  - Using gevent or eventlet requires greenlet&gt;=1.0 or
    PyPy&gt;=7.3.7. werkzeug.locals and contextvars will not work
    correctly with older versions.
  - Remove previously deprecated code.
  - Remove the non-standard shutdown function from the WSGI
    environ when running the development server. See the docs
    for alternatives.
  - Request and response mixins have all been merged into the
    Request and Response classes.
  - The user agent parser and the useragents module is
    removed. The user_agent module provides an interface that
    can be subclassed to add a parser, such as ua-parser. By
    default it only stores the whole string.
  - The test client returns TestResponse instances and can no
    longer be treated as a tuple. All data is available as
    properties on the response.
  - Remove locals.get_ident and related thread-local code from
    locals, it no longer makes sense when moving to
    a contextvars-based implementation.
  - Remove the python -m werkzeug.serving CLI.
  - The has_key method on some mapping datastructures; use key
    in data instead.
  - Request.disable_data_descriptor is removed, pass
    shallow=True instead.
  - Remove the no_etag parameter from Response.freeze().
  - Remove the HTTPException.wrap class method.
  - Remove the cookie_date function. Use http_date instead.
  - Remove the pbkdf2_hex, pbkdf2_bin, and safe_str_cmp
    functions. Use equivalents in hashlib and hmac modules
    instead.
  - Remove the Href class.
  - Remove the HTMLBuilder class.
  - Remove the invalidate_cached_property function. Use del
    obj.attr instead.
  - Remove bind_arguments and validate_arguments. Use
    Signature.bind() and inspect.signature() instead.
  - Remove detect_utf_encoding, it’s built-in to json.loads.
  - Remove format_string, use string.Template instead.
  - Remove escape and unescape. Use MarkupSafe instead.
  - The multiple parameter of parse_options_header is
    deprecated.
  - Rely on PEP 538 and PEP 540 to handle decoding file names
    with the correct filesystem encoding. The filesystem module
    is removed.
  - Default values passed to Headers are validated the same way
    values added later are.
  - Setting CacheControl int properties, such as max_age, will
    convert the value to an int.
  - Always use socket.fromfd when restarting the dev server.
  - When passing a dict of URL values to Map.build, list values
    do not filter out None or collapse to a single value.
    Passing a MultiDict does collapse single items. This undoes
    a previous change that made it difficult to pass a list, or
    None values in a list, to custom URL converters.
  - run_simple shows instructions for dealing with “address
    already in use” errors, including extra instructions for
    macOS.
  - Extend list of characters considered always safe in URLs
    based on RFC 3986.
  - Optimize the stat reloader to avoid watching unnecessary
    files in more cases. The watchdog reloader is still
    recommended for performance and accuracy.
  - The development server uses Transfer-Encoding: chunked for
    streaming responses when it is configured for HTTP/1.1.
  - The development server uses HTTP/1.1, which enables
    keep-alive connections and chunked streaming responses,
    when threaded or processes is enabled.
  - cached_property works for classes with __slots__ if
    a corresponding _cache_{name} slot is added.
  - Refactor the debugger traceback formatter to use Python’s
    built-in traceback module as much as possible.
  - The TestResponse.text property is a shortcut for
    r.get_data(as_text=True), for convenient testing against
    text instead of bytes.
  - safe_join ensures that the path remains relative if the
    trusted directory is the empty string.
  - Percent-encoded newlines (%0a), which are decoded by WSGI
    servers, are considered when routing instead of terminating
    the match early.
  - The test client doesn’t set duplicate headers for
    CONTENT_LENGTH and CONTENT_TYPE.
  - append_slash_redirect handles PATH_INFO with internal
    slashes.
  - The default status code for append_slash_redirect is 308
    instead of 301. This preserves the request body, and
    matches a previous change to strict_slashes in routing.
  - Fix ValueError: I/O operation on closed file. with the test
    client when following more than one redirect.
  - Response.autocorrect_location_header is disabled by
    default. The Location header URL will remain relative, and
    exclude the scheme and domain, by default.
  - Request.get_json() will raise a 400 BadRequest error if the
    Content-Type header is not application/json. This makes
    a very common source of confusion more visible.
- Add no-network-testing.patch to mark all tests requiring
  network access (so they can be skipped by pytest test runner,
  gh#pallets/werkzeug#2393).</changelog>
  <changelog author="mcepl@suse.com" date="1651147200">- Replace no-network-testing.patch with the upstream solution
  2402-dev_server.patch from gh#pallets/werkzeug#2402.
- Add moved_root.patch to make test test_exclude_patterns with
  different PYTHONPATH.</changelog>
  <changelog author="dmueller@suse.com" date="1652270400">- update to 2.1.2:
  * The development server does not set ``Transfer-Encoding: chunked``
    for 1xx, 204, 304, and HEAD responses. :issue:`2375`
  * Response HTML for exceptions and redirects starts with
    ``&lt;!doctype html&gt;`` and ``&lt;html lang=en&gt;``. :issue:`2390`
  * Fix ability to set some ``cache_control`` attributes to ``False``.
    :issue:`2379`
  * Disable ``keep-alive`` connections in the development server, which
    are not supported sufficiently by Python's ``http.server``.
    :issue:`2397`
- drop 2402-dev_server.patch (upstream)</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659096000">- enable multibuild for test</changelog>
  <changelog author="yarunachalam@suse.com" date="1662724800">- Update to 2.2.2:
  * Fix router to restore the 2.1 strict_slashes == False behaviour whereby leaf-requests match branch rules and vice versa. #2489
  * Fix router to identify invalid rules rather than hang parsing them, and to correctly parse / within converter arguments. #2489
  * Update subpackage imports in werkzeug.routing to use the import as syntax for explicitly re-exporting public attributes. #2493
  * Parsing of some invalid header characters is more robust. #2494
  * When starting the development server, a warning not to use it in a production deployment is always shown. #2480
  * LocalProxy.__wrapped__ is always set to the wrapped object when the proxy is unbound, fixing an issue in doctest that would cause it to fail. #2485
  * Address one ResourceWarning related to the socket used by run_simple. #2421
- Update to Version 2.2.1:
  * Fix router so that /path/ will match a rule /path if strict slashes mode is disabled for the rule. #2467
  * Fix router so that partial part matches are not allowed i.e. /2df does not match /&lt;int&gt;. #2470
  * Fix router static part weighting, so that simpler routes are matched before more complex ones. #2471
  * Restore ValidationError to be importable from werkzeug.routing. #2465
- Update to Version 2.2.0
  * Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. #2461
  * Remove previously deprecated code. #2461
  * Add MarkupSafe as a dependency and use it to escape values when rendering HTML. #2419
  * Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. #2439
  * Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. #2425
  * Add a new faster matching router based on a state machine. #2433
  * Fix branch leaf path masking branch paths when strict-slashes is disabled. #1074
  * Names within options headers are always converted to lowercase. This matches RFC 6266 that the case is not relevant. #2442
  * AnyConverter validates the value passed for it when building URLs. #2388
  * The debugger shows enhanced error locations in tracebacks in Python 3.11. #2407
  * Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. #2408
  * Added Sans-IO get_content_length function. #2415
  * Don’t assume a mimetype for test responses. #2450
  * Type checking FileStorage accepts os.PathLike. #2418</changelog>
  <changelog author="yarunachalam@suse.com" date="1662984000">- test failed due to markupsafe module missing
  Included markupsafe module</changelog>
  <changelog author="code@bnavigator.de" date="1663070400">- Clean some unused python2 python36 code from specfile
- Move MarkupSafe to runtime requirement. Versioned. This is
  checked in multibuild test flavor as build requirement.</changelog>
  <changelog author="dmueller@suse.com" date="1678708800">- update to 2.2.3 (bsc#1208283, CVE-2023-25577):
  * drops 0001-limit-the-maximum-number-of-multipart-form-parts.patch
    in older dists
  * Ensure that URL rules using path converters will redirect
    with strict slashes when the trailing slash is missing.
  * Type signature for ``get_json`` specifies that return type
    is not optional when ``silent=False``.
  * ``parse_content_range_header`` returns ``None`` for a value
    like ``bytes */-1`` where the length is invalid, instead of
    raising an ``AssertionError``.
  * Address remaining ``ResourceWarning`` related to the socket
    used by ``run_simple``.
  * Remove ``prepare_socket``, which now happens when
    creating the server.
  * Update pre-existing headers for ``multipart/form-data``
    requests with the test client.
  * Fix handling of header extended parameters such that they
    are no longer quoted.
  * ``LimitedStream.read`` works correctly when wrapping a
    stream that may not return the requested size in one
    ``read`` call.
  * A cookie header that starts with ``=`` is treated as an
    empty key and discarded, rather than stripping the leading ``==``.
  * Specify a maximum number of multipart parts, default 1000,
    after which a ``RequestEntityTooLarge`` exception is
    raised on parsing.  This mitigates a DoS attack where a
    larger number of form/file parts would result in disproportionate
    resource use.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="alarrosa@suse.com" date="1687176000">- Update to 2.3.6:
  * FileStorage.content_length does not fail if the form data did not provide
    a value.
- Update to 2.3.5:
  * Python 3.12 compatibility.
  * Fix handling of invalid base64 values in Authorization.from_header.
  * The debugger escapes the exception message in the page title.
  * When binding routing.Map, a long IDNA server_name with a port does not
    fail encoding.
  * iri_to_uri shows a deprecation warning instead of an error when passing
    bytes.
  * When parsing numbers in HTTP request headers such as Content-Length, only
    ASCII digits are accepted rather than any format that Python’s int and
    float accept.
- Update to 2.3.4:
  * Authorization.from_header and WWWAuthenticate.from_header detects tokens
    that end with base64 padding (=).
  * Remove usage of warnings.catch_warnings.
  * Remove max_form_parts restriction from standard form data parsing and only
    use if for multipart content.
  * Response will avoid converting the Location header in some cases to
    preserve invalid URL schemes like itms-services.
- Update to 2.3.3:
  * Fix parsing of large multipart bodies. Remove invalid leading newline, and
    restore parsing speed.
  * The cookie Path attribute is set to / by default again, to prevent clients
    from falling back to RFC 6265’s default-path behavior.
- Update to 2.3.2:
  * Parse the cookie Expires attribute correctly in the test client.
  * max_content_length can only be enforced on streaming requests if the
    server sets wsgi.input_terminated.
- Update to 2.3.1:
  * Percent-encode plus (+) when building URLs and in test requests.
  * Cookie values don’t quote characters defined in RFC 6265.
  * Include pyi files for datastructures type annotations.
  * Authorization and WWWAuthenticate objects can be compared for equality.
- Update to 2.3.0:
  * Drop support for Python 3.7.
  * Remove previously deprecated code.
  * Passing bytes where strings are expected is deprecated, as well as the
    charset and errors parameters in many places. Anywhere that was annotated,
    documented, or tested to accept bytes shows a warning. Removing this
    artifact of the transition from Python 2 to 3 removes a significant amount
    of overhead in instance checks and encoding cycles. In general, always
    work with UTF-8, the modern HTML, URL, and HTTP standards all strongly
    recommend this.
  * Deprecate the werkzeug.urls module, except for the uri_to_iri and
    iri_to_uri functions. Use the urllib.parse library instead.
  * Update which characters are considered safe when using percent encoding
    in URLs, based on the WhatWG URL Standard.
  * Update which characters are considered safe when using percent encoding
    for Unicode filenames in downloads.
  * Deprecate the safe_conversion parameter of iri_to_uri. The Location header
    is converted to IRI using the same process as everywhere else.
  * Deprecate werkzeug.wsgi.make_line_iter and make_chunk_iter.
  * Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  * Request.get_json() will raise a 415 Unsupported Media Type error if the
    Content-Type header is not application/json, instead of a generic 400.
  * A URL converter’s part_isolating defaults to False if its regex contains
    a /.
  * A custom converter’s regex can have capturing groups without breaking
    the router.
  * The reloader can pick up arguments to python like -X dev, and does not
    require heuristics to determine how to reload the command. Only available
    on Python &gt;= 3.10.
  * The Watchdog reloader ignores file opened events. Bump the minimum version
    of Watchdog to 2.3.0.
  * When using a Unix socket for the development server, the path can start
    with a dot.
  * Increase default work factor for PBKDF2 to 600,000 iterations.
  * parse_options_header is 2-3 times faster. It conforms to RFC 9110, some
    invalid parts that were previously accepted are now ignored.
  * The is_filename parameter to unquote_header_value is deprecated.
  * Deprecate the extra_chars parameter and passing bytes to
    quote_header_value, the allow_token parameter to dump_header, and the cls
    parameter and passing bytes to parse_dict_header.
  * Improve parse_accept_header implementation. Parse according to RFC 9110.
    Discard items with invalid q values.
  * quote_header_value quotes the empty string.
  * dump_options_header skips None values rather than using a bare key.
  * dump_header and dump_options_header will not quote a value if the key ends
    with an asterisk *.
  * parse_dict_header will decode values with charsets.
  * Refactor the Authorization and WWWAuthenticate header data structures.
    + Both classes have type, parameters, and token attributes. The token
    attribute supports auth schemes that use a single opaque token rather
    than key=value parameters, such as Bearer.
    + Neither class is a dict anymore, although they still implement getting,
    setting, and deleting auth[key] and auth.key syntax, as well as
    auth.get(key) and key in auth.
    + Both classes have a from_header class method. parse_authorization_header
    and parse_www_authenticate_header are deprecated.
    + The methods WWWAuthenticate.set_basic and set_digest are deprecated.
    Instead, an instance should be created and assigned to
    response.www_authenticate.
    + A list of instances can be assigned to response.www_authenticate to set
    multiple header values. However, accessing the property only returns the
    first instance.
  * Refactor parse_cookie and dump_cookie.
    + parse_cookie is up to 40% faster, dump_cookie is up to 60% faster.
    + Passing bytes to parse_cookie and dump_cookie is deprecated. The
    dump_cookie charset parameter is deprecated.
    + dump_cookie allows domain values that do not include a dot ., and strips
    off a leading dot.
    + dump_cookie does not set path="/" unnecessarily by default.
  * Refactor the test client cookie implementation.
    + The cookie_jar attribute is deprecated. http.cookiejar is no longer used
    for storage.
    + Domain and path matching is used when sending cookies in requests. The
    domain and path parameters default to localhost and /.
    + Added a get_cookie method to inspect cookies.
    + Cookies have decoded_key and decoded_value attributes to match what the
    app sees rather than the encoded values a client would see.
    + The first positional server_name parameter to set_cookie and
    delete_cookie is deprecated. Use the domain parameter instead.
    + Other parameters to delete_cookie besides domain, path, and value are
    deprecated.
  * If request.max_content_length is set, it is checked immediately when
    accessing the stream, and while reading from the stream in general, rather
    than only during form parsing.
  * The development server, which must not be used in production, will exhaust
    the request stream up to 10GB or 1000 reads. This allows clients to see a
    413 error if max_content_length is exceeded, instead of a “connection
    reset” failure.
  * The development server discards header keys that contain underscores _, as
    they are ambiguous with dashes - in WSGI.
  * secure_filename looks for more Windows reserved file names.
  * Update type annotation for best_match to make default parameter clearer.
  * Multipart parser handles empty fields correctly.
  * The Map charset parameter and Request.url_charset property are deprecated.
    Percent encoding in URLs must always represent UTF-8 bytes. Invalid bytes
    are left percent encoded rather than replaced.
  * The Request.charset, Request.encoding_errors, Response.charset, and
    Client.charset attributes are deprecated. Request and response data must
    always use UTF-8.
  * Header values that have charset information only allow ASCII, UTF-8, and
    ISO-8859-1.
  * Update type annotation for ProfilerMiddleware stream parameter.
  * Use postponed evaluation of annotations.
  * The development server escapes ASCII control characters in decoded URLs
    before logging the request to the terminal.
  * The FormDataParser parse_functions attribute and get_parse_func method,
    and the invalid application/x-url-encoded content type, are deprecated.
  * generate_password_hash supports scrypt. Plain hash methods are deprecated,
    only scrypt and pbkdf2 are supported.
- Remove patch which was made obsolete by upstream:
  * moved_root.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1698408000">- Add patch CVE-2023-46136-slow-multipart-parsing.patch:
  * Stop slow multipart parsing with large files. (CVE-2023-46136, bsc#1216581)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34069.patch, restrict debugger trusted hosts.
  (bsc#1223979, CVE-2024-34069, gh#pallets/werkzeug@3386395b24c7)</changelog>
</package>
<package pkgid="7c7432a6f24f877ad62ecb5a43fad817c831f311e09b0b6bf0d09876ba4f3972" name="python-Werkzeug-doc" arch="noarch">
  <version epoch="0" ver="0.14.1" rel="150100.6.9.1"/>
  <changelog author="toddrme2178@gmail.com" date="1473940800">- update to version 0.11.11:
  * Fix JSONRequestMixin for Python3. See #731
  * Fix broken string handling in test client when passing
    integers. See #852
  * Fix a bug in "parse_options_header" where an invalid content type
    starting with comma or semi-colon would result in an invalid
    return value, see issue "#995".
  * Fix a bug in multidicts when passing empty lists as values, see
    issue "#979".
  * Fix a security issue that allows XSS on the Werkzeug debugger. See
    "#1001".
- update to version 0.11.10:
  * Fixed a bug that occurs when running on Python 2.6 and using a
    broken locale.  See pull request #912.
  * Fixed a crash when running the debugger on Google App Engine. See
    issue #925.
  * Fixed an issue with multipart parsing that could cause memory
    exhaustion.
- Update to 0.11.9
  - Corrected an issue that caused the debugger not to use the
    machine GUID on POSIX systems.
  - Corrected an Unicode error on Python 3 for the debugger's
    PIN usage.
  - Corrected the timestamp verification in the pin debug code.
    Without this fix the pin was remebered until too long.
- update to version 0.11.8:
  * fixed a problem with the machine GUID detection code on OS X on
    Python 3.
- changes from version 0.11.7:
  * fixed a regression on Python 3 for the debugger.
- changes from version 0.11.6:
  * werkzeug.serving: Still show the client address on bad requests.
  * improved the PIN based protection for the debugger to make it
    harder to brute force via trying cookies.  Please keep in mind
    that the debugger *is not intended for running on production
    environments*
  * increased the pin timeout to a week to make it less annoying for
    people which should decrease the change that users disable the pin
    check entirely.
  * werkzeug.serving: Fix broken HTTP_HOST when path starts with
    double slash.
- update to version 0.11.5:
  * werkzeug.serving: Fix crash when attempting SSL connection to HTTP
    server.
- update to version 0.11.4:
  * Fixed werkzeug.serving not working from -m flag.
  * Fixed incorrect weak etag handling.
- Rebase 0001_create_a_thread_to_reap_death_process.patch
- Split documentation into own subpackage to speed up build.</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update to 0.12.1
- use python3-Sphinx for build</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 0.12.2:
  - Fix regression: Pull request ``#892`` prevented Werkzeug from correctly
    logging the IP of a remote client behind a reverse proxy, even when using
    `ProxyFix`.
  - Fix a bug in `safe_join` on Windows.</changelog>
  <changelog author="arun@gmx.de" date="1512734400">- specfile:
  * added CHANGES.rst and README.rst to %doc section
  * require requests and hypothesis for tests
- update to version 0.13:
  * Deprecate support for Python 2.6 and 3.3. CI tests will not run
    for these versions, and support will be dropped completely in the
    next version. (pallets/meta#24)
  * Raise TypeError when port is not an integer. (#1088)
  * Fully deprecate werkzeug.script. Use Click instead. (#1090)
  * response.age is parsed as a timedelta. Previously, it was
    incorrectly treated as a datetime. The header value is an integer
    number of seconds, not a date string. (#414)
  * Fix a bug in TypeConversionDict where errors are not propagated
    when using the converter. (#1102)
  * Authorization.qop is a string instead of a set, to comply with RFC
    2617. (#984)
  * An exception is raised when an encoded cookie is larger than, by
    default, 4093 bytes. Browsers may silently ignore cookies larger
    than this. BaseResponse has a new attribute max_cookie_size and
    dump_cookie has a new argument max_size to configure this. (#780,
    [#1109])
  * Fix a TypeError in
    werkzeug.contrib.lint.GuardedIterator.close. (#1116)
  * BaseResponse.calculate_content_length now correctly works for
    Unicode responses on Python 3. It first encodes using
    iter_encoded. (#705)
  * Secure cookie contrib works with string secret key on Python
    3. (#1205)
  * Shared data middleware accepts a list instead of a dict of static
    locations to preserve lookup order. (#1197)
  * HTTP header values without encoding can contain single
    quotes. (#1208)
  * The built-in dev server supports receiving requests with chunked
    transfer encoding. (#1198)</changelog>
  <changelog author="arun@gmx.de" date="1514980800">- specfile:
  * update copyright year
- update to version 0.14.1:
  * Resolved a regression with status code handling in the integrated
    development server.
- changes from version 0.14:
  * HTTP exceptions are now automatically caught by
    Request.application.
  * Added support for edge as browser.
  * Added support for platforms that lack SpooledTemporaryFile.
  * Add support for etag handling through if-match
  * Added support for the SameSite cookie attribute.
  * Added werkzeug.wsgi.ProxyMiddleware
  * Implemented has for NullCache
  * get_multi on cache clients now returns lists all the time.
  * Improved the watchdog observer shutdown for the reloader to not
    crash on exit on older Python versions.
  * Added support for filename* filename attributes according to RFC
    2231
  * Resolved an issue where machine ID for the reloader PIN was not
    read accurately on windows.
  * Added a workaround for syntax errors in init files in the
    reloader.
  * Added support for using the reloader with console scripts on
    windows.
  * The built-in HTTP server will no longer close a connection in
    cases where no HTTP body is expected (204, 204, HEAD requests
    etc.)
  * The EnvironHeaders object now skips over empty content type and
    lengths if they are set to falsy values.
  * Werkzeug will no longer send the content-length header on 1xx or
    204/304 responses.
  * Cookie values are now also permitted to include slashes and equal
    signs without quoting.
  * Relaxed the regex for the routing converter arguments.
  * If cookies are sent without values they are now assumed to have an
    empty value and the parser accepts this. Previously this could
    have corrupted cookies that followed the value.
  * The test Client and EnvironBuilder now support mimetypes like the
    request object does.
  * Added support for static weights in URL rules.
  * Better handle some more complex reloader scenarios where sys.path
    contained non directory paths.
  * EnvironHeaders no longer raises weird errors if non string keys
    are passed to it.</changelog>
</package>
<package pkgid="f82acc4cd607b96268ae0efc8226a184aee9a14180a8e89e826b1a73f09090bc" name="python-Werkzeug-doc" arch="src">
  <version epoch="0" ver="0.14.1" rel="150100.6.9.1"/>
  <changelog author="toddrme2178@gmail.com" date="1473940800">- update to version 0.11.11:
  * Fix JSONRequestMixin for Python3. See #731
  * Fix broken string handling in test client when passing
    integers. See #852
  * Fix a bug in "parse_options_header" where an invalid content type
    starting with comma or semi-colon would result in an invalid
    return value, see issue "#995".
  * Fix a bug in multidicts when passing empty lists as values, see
    issue "#979".
  * Fix a security issue that allows XSS on the Werkzeug debugger. See
    "#1001".
- update to version 0.11.10:
  * Fixed a bug that occurs when running on Python 2.6 and using a
    broken locale.  See pull request #912.
  * Fixed a crash when running the debugger on Google App Engine. See
    issue #925.
  * Fixed an issue with multipart parsing that could cause memory
    exhaustion.
- Update to 0.11.9
  - Corrected an issue that caused the debugger not to use the
    machine GUID on POSIX systems.
  - Corrected an Unicode error on Python 3 for the debugger's
    PIN usage.
  - Corrected the timestamp verification in the pin debug code.
    Without this fix the pin was remebered until too long.
- update to version 0.11.8:
  * fixed a problem with the machine GUID detection code on OS X on
    Python 3.
- changes from version 0.11.7:
  * fixed a regression on Python 3 for the debugger.
- changes from version 0.11.6:
  * werkzeug.serving: Still show the client address on bad requests.
  * improved the PIN based protection for the debugger to make it
    harder to brute force via trying cookies.  Please keep in mind
    that the debugger *is not intended for running on production
    environments*
  * increased the pin timeout to a week to make it less annoying for
    people which should decrease the change that users disable the pin
    check entirely.
  * werkzeug.serving: Fix broken HTTP_HOST when path starts with
    double slash.
- update to version 0.11.5:
  * werkzeug.serving: Fix crash when attempting SSL connection to HTTP
    server.
- update to version 0.11.4:
  * Fixed werkzeug.serving not working from -m flag.
  * Fixed incorrect weak etag handling.
- Rebase 0001_create_a_thread_to_reap_death_process.patch
- Split documentation into own subpackage to speed up build.</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update to 0.12.1
- use python3-Sphinx for build</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 0.12.2:
  - Fix regression: Pull request ``#892`` prevented Werkzeug from correctly
    logging the IP of a remote client behind a reverse proxy, even when using
    `ProxyFix`.
  - Fix a bug in `safe_join` on Windows.</changelog>
  <changelog author="arun@gmx.de" date="1512734400">- specfile:
  * added CHANGES.rst and README.rst to %doc section
  * require requests and hypothesis for tests
- update to version 0.13:
  * Deprecate support for Python 2.6 and 3.3. CI tests will not run
    for these versions, and support will be dropped completely in the
    next version. (pallets/meta#24)
  * Raise TypeError when port is not an integer. (#1088)
  * Fully deprecate werkzeug.script. Use Click instead. (#1090)
  * response.age is parsed as a timedelta. Previously, it was
    incorrectly treated as a datetime. The header value is an integer
    number of seconds, not a date string. (#414)
  * Fix a bug in TypeConversionDict where errors are not propagated
    when using the converter. (#1102)
  * Authorization.qop is a string instead of a set, to comply with RFC
    2617. (#984)
  * An exception is raised when an encoded cookie is larger than, by
    default, 4093 bytes. Browsers may silently ignore cookies larger
    than this. BaseResponse has a new attribute max_cookie_size and
    dump_cookie has a new argument max_size to configure this. (#780,
    [#1109])
  * Fix a TypeError in
    werkzeug.contrib.lint.GuardedIterator.close. (#1116)
  * BaseResponse.calculate_content_length now correctly works for
    Unicode responses on Python 3. It first encodes using
    iter_encoded. (#705)
  * Secure cookie contrib works with string secret key on Python
    3. (#1205)
  * Shared data middleware accepts a list instead of a dict of static
    locations to preserve lookup order. (#1197)
  * HTTP header values without encoding can contain single
    quotes. (#1208)
  * The built-in dev server supports receiving requests with chunked
    transfer encoding. (#1198)</changelog>
  <changelog author="arun@gmx.de" date="1514980800">- specfile:
  * update copyright year
- update to version 0.14.1:
  * Resolved a regression with status code handling in the integrated
    development server.
- changes from version 0.14:
  * HTTP exceptions are now automatically caught by
    Request.application.
  * Added support for edge as browser.
  * Added support for platforms that lack SpooledTemporaryFile.
  * Add support for etag handling through if-match
  * Added support for the SameSite cookie attribute.
  * Added werkzeug.wsgi.ProxyMiddleware
  * Implemented has for NullCache
  * get_multi on cache clients now returns lists all the time.
  * Improved the watchdog observer shutdown for the reloader to not
    crash on exit on older Python versions.
  * Added support for filename* filename attributes according to RFC
    2231
  * Resolved an issue where machine ID for the reloader PIN was not
    read accurately on windows.
  * Added a workaround for syntax errors in init files in the
    reloader.
  * Added support for using the reloader with console scripts on
    windows.
  * The built-in HTTP server will no longer close a connection in
    cases where no HTTP body is expected (204, 204, HEAD requests
    etc.)
  * The EnvironHeaders object now skips over empty content type and
    lengths if they are set to falsy values.
  * Werkzeug will no longer send the content-length header on 1xx or
    204/304 responses.
  * Cookie values are now also permitted to include slashes and equal
    signs without quoting.
  * Relaxed the regex for the routing converter arguments.
  * If cookies are sent without values they are now assumed to have an
    empty value and the parser accepts this. Previously this could
    have corrupted cookies that followed the value.
  * The test Client and EnvironBuilder now support mimetypes like the
    request object does.
  * Added support for static weights in URL rules.
  * Better handle some more complex reloader scenarios where sys.path
    contained non directory paths.
  * EnvironHeaders no longer raises weird errors if non string keys
    are passed to it.</changelog>
</package>
<package pkgid="c9908d6025c4d04e6cd71c91d1aa2aaacdbd1a2e1c274fb60062073544dbfb20" name="python-aiohttp" arch="src">
  <version epoch="0" ver="3.9.3" rel="150400.10.18.4"/>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 3.8.3:
  * Increased the upper boundary of the :doc:`multidict:index` dependency
    to allow for the version 6 -- by :user:`hugovk`.
  * Added support for registering :rfc:`OPTIONS &lt;9110#OPTIONS&gt;`
    HTTP method handlers via :py:class:`~aiohttp.web.RouteTableDef`.
  * Started supporting :rfc:`authority-form &lt;9112#authority-form&gt;` and
    :rfc:`absolute-form &lt;9112#absolute-form&gt;` URLs on the server-side.
  * Fixed Python 3.11 incompatibilities by using Cython 0.29.25.
  * Extended the ``sock`` argument typing declaration of the
    :py:func:`~aiohttp.web.run_app` function as optionally
    accepting iterables.
  * Fixed a regression where :py:exc:`~asyncio.CancelledError`
    occurs on client disconnection.
  * Started exporting :py:class:`~aiohttp.web.PrefixedSubAppResource`
    under :py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.
  * Dropped the :class:`object` type possibility from
    the :py:attr:`aiohttp.ClientSession.timeout`
    property return type declaration.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
</package>
<package pkgid="1072b3ddeae60d256e1cd4e792935b17f783ae68d51372122df5ab8361133242" name="python-aiohttp" arch="src">
  <version epoch="0" ver="3.9.3" rel="150400.10.21.1"/>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715688000">- Add patch to fix XSS on index pages for static file handling
  * CVE-2024-27306.patch (bsc#1223098, CVE-2024-27306)
- Add patch to remove pytest.mark.internal marker to enable CVE-2024-27306 tests
  * remove-pytest.mark.internal.patch</changelog>
</package>
<package pkgid="4458604a17bf242b93251d8d09e14db88a3cf4ea8959f24c9c1d50c58dff17ac" name="python-aiosignal" arch="src">
  <version epoch="0" ver="1.3.1" rel="150400.9.7.2"/>
  <changelog author="code@bnavigator.de" date="1639224000">- initial specfile for version 1.2.0
- required by aiohttp 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1640001600">- Add missing test dependency pytest-asyncio</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Update to 1.3.1:
  * Removed stray quote and comma from setup.cfg preventing PyPI from
    accepting a release. (#361)
- 1.3.0:
  * Switched to declarative package setup. #267
  * Added support for Python 3.11. #360
  * Dropped Python 3.6 support. #267</changelog>
</package>
<package pkgid="3e5c3d6762cba858cb5fa0567b5472b47de6dd3b6444c794d732e8c3325e93ce" name="python-argcomplete" arch="src">
  <version epoch="0" ver="3.3.0" rel="150400.12.12.2"/>
  <changelog author="pgajdos@suse.com" date="1590580800">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.12.2:
  - Update importlib-metadata dependency pin (#332)
  - Add change log project URL (#312)
  - Replace Travis CI with GitHub Actions (#323)
  - Update importlib-metadata dependency version range
  - Bash nounset mode fixes (#313)
- remove 0001-Remove-expected-test-failure-for-new-versions-of-fish.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 1.12.3:
  * Update importlib-metadata version pin
  * Display script debug output in tcsh
  * Fish support improvements
  * Print ``warn()`` message from beginning of line
  * Test infrastructure improvements</changelog>
  <changelog author="dmueller@suse.com" date="1657108800">- update to 2.0.0:
  * Truncate input after cursor.
  * Support of path completion in fish
  * Drop support for Python 2.7 and 3.5
  * Add support for Python 3.10
  * Test, documentation, and release infrastructure improvements</changelog>
  <changelog author="dmueller@suse.com" date="1675166400">- fix substitution on tests/test.py to test the current python flavor</changelog>
  <changelog author="mcepl@suse.com" date="1678968000">- Add without_fish.patch which makes fish only optional
  BuildRequires (gh#kislyuk/argcomplete!410).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1679659200">- Remove importlib-metadata requirement, it's not needed for python &gt; 3.7</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add without_zsh.patch
- Delete skip_tcsh_tests.patch
- Delete without_fish.patch
- Update to 3.0.8:
  * Test suite shell wrapper: Accept OSError on exit
- 3.0.7:
  * Test suite: Use general regex to cut zsh reset ANSI sequences (#425)
- 3.0.6:
  * Allow importlib-metadata 6.x; skip test failures on Python 3.7 (#420, #424)
  * Note completers can return iterables of strings, not just lists (#422)
  * Documentation and test improvements
- 3.0.5:
  * Call _default as fallback in zsh global completion hook
  * Begin support for mapping-emitting completers
- 3.0.4:
  * activate-global-python-argcomplete: do not overwrite existing dotfile in user directory
  * Add NOTICE file
  * Establish long term name for split_line as argcomplete.lexers.split_line
- 3.0.3:
  * Re-add split_line to API (#419)
- 3.0.2:
  * Fix zsh default completion issues
- 3.0.1:
  * Fix zsh autoload issues
- 3.0.0:
  * Fully support zsh. Argcomplete now supports completion
    descriptions and global completion in zsh.
  * Clean up top level namespace.
  * Documentation and test improvements.
- 2.1.2:
  * Test infrastructure improvements
  * Indicate that there is no support commitment for fish and tcsh shells
- 2.1.1:
  * Documentation and test improvements
- 2.1.0:
  * Remove scripts for contrib-supported shells from global namespace
- 2.0.6:
  * setup.py: exclude test.* subpackages from find_packages (#406)
  * Support PowerShell (#405)
  * CI updates
- 2.0.5:
  * Revert "Support powershell (#392)"</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- bash-repl.patch: Use correct place for auxiliary bashrc.sh file from pexpect</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 3.1.1
  * Search through asdf shims
  * Use \` as escape character in PowerShell (#434)
- from version 3.1.0
  * setup.py -&gt; pyproject.toml migration start (#427)
  * Improve user install logic in activate-global-python-argcomplete (#437)
  * Ensure Python 3.7 compatibility in check_console_script (#436)
  * ZSH implementation fixes (#431, #433)
  * Documentation improvements
- Drop obsolete patch
  * trim-test-deps.patch</changelog>
  <changelog author="dmueller@suse.com" date="1696507200">- update to 3.1.2:
  * Ensure Python 3.12+ compatibility in check_console_script</changelog>
  <changelog author="dmueller@suse.com" date="1698148800">- add setuptools_scm for proper version detection</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 3.1.4:
  * Call \_default as a fallback in zsh global completion
  * zsh: Allow to use external script (#453)
  * Add support for Python 3.12 and drop EOL 3.6 and 3.7 (#449)
  * Use homebrew prefix by default
  * zsh: Allow to use external script (#453)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.1.6:
  * Respect user choice in activate-global-python-argcomplete
  * Escape colon in zsh completions. Fixes #456
  * Call \_default as a fallback in zsh global completion</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- update to 3.2.1:
  * Allow explicit zsh global completion activation (#467)
  * Fix and test global completion in zsh (#463, #466)
  * Add –yes option to activate-global-python-argcomplete (#461)
  * Test suite improvements
- drop without_zsh.patch: obsolete</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- Remove coverage check
- Fix zsh test failures: avoid coloring terminal</changelog>
  <changelog author="dmueller@suse.com" date="1706616000">- update to 3.2.2:
  * Expand tilde in zsh</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Update to 3.3.0 (bsc#1222880):
  * Preserve compatibility with argparse option tuples of length 4.
    This update is required to use argcomplete on Python 3.11.9+ or
    3.12.3+.
- update to 3.2.3:
  * Allow register-python-argcomplete output to be used as lazy-loaded
    zsh completion module (#475)
  - Move debug_stream initialization to helper method to allow fd 9
    behavior to be overridden in subclasses (#471)</changelog>
</package>
<package pkgid="4dadb6ba2b38bca94d3ebc07ac850ab2b801c3648c4632e8a3e736b955de87a1" name="python-asgiref" arch="src">
  <version epoch="0" ver="3.6.0" rel="150400.9.7.3"/>
  <changelog author="mrueckert@suse.de" date="1587643200">- initial package</changelog>
  <changelog author="tchvatal@suse.com" date="1587729600">- Execute tests</changelog>
  <changelog author="steven.kowalik@suse.com" date="1593604800">- Update to 3.2.10:
  * Fixed bugs due to bad WeakRef handling introduced in 3.2.8
  * Fixed regression with exception handling in 3.2.8 related to the
    contextvars fix.
  * Fixed small memory leak in local.Local
  * contextvars are now persisted through AsyncToSync</changelog>
  <changelog author="steven.kowalik@suse.com" date="1610625600">- Update to 3.3.1
  * Updated StatelessServer to use ASGI v3 single-callable applications.
  * sync_to_async now defaults to thread-sensitive mode being on
  * async_to_sync now works inside of forked processes
  * WsgiToAsgi now correctly clamps its response body when Content-Length
    is set</changelog>
  <changelog author="code@bnavigator.de" date="1620216000">- Update to 3.3.4
  * The async_to_sync type error is now a warning due the
    high false negative rate when trying to detect
    coroutine-returning callables in Python.
- Release to 3.3.3
  * The sync conversion functions now correctly detect
    functools.partial and other wrappers around async
    functions on earlier Python releases.
- Release to 3.3.2
  * SyncToAsync now takes an optional "executor" argument if
    you want to supply your own executor rather than using
    the built-in one.
  * async_to_sync and sync_to_async now check their
    arguments are functions of the correct type.
  * Raising CancelledError inside a SyncToAsync function no
    longer stops a future call from functioning.
  * ThreadSensitive now provides context hooks/override
    options so it can be made to be sensitive in a unit
    smaller than threads (e.g. per request)</changelog>
  <changelog author="mmachova@suse.com" date="1625659200">- Adjust requirements to work also on Leap</changelog>
  <changelog author="simmphonie@opensuse.org" date="1630411200">- Update to 3.4.1
  * Fixed an issue with the deadlock detection where it had false positives
    during exception handling- Release to 3.4.0
- Release to 3.4.0
  * Calling sync_to_async directly from inside itself (which causes a deadlock
    when in the default, thread-sensitive mode) now has deadlock detection.
  * asyncio usage has been updated to use the new versions of get_event_loop,
    ensure_future, wait and gather, avoiding deprecation warnings in Python 3.10.
    Python 3.6 installs continue to use the old versions; this is only for 3.7+
  * sync_to_async and async_to_sync now have improved type hints that pass
    through the underlying function type correctly.
  * All Websocket* types are now spelled WebSocket, to match our specs and the
    official spelling. The old names will work until release 3.5.0, but will
    raise deprecation warnings.
  * The typing for WebSocketScope and HTTPScope's `extensions` key has been
    fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.5.2:
  * Fix async-to-async typo
  * Add tests for sync_to_async
  * Improved docs - Starlette supports WebSockets
  * Use get_event_loop in class-level code
  * Changed how StatelessServer handles event loops
  * Fixed pytest_asyncio deprecation warning.
  * Drop python 3.6, add python 3.10
  * Fix allowed values for spec_version
  * Rewrote multiprocessing test to use no local functions
  * Fixed a typographical error
  * Remove SOCK_NONBLOCK from socket creation on tests
  * Preserve CurrentThreadExecutor across create_task
  * Don't warn 'non-async-marked callable' for async callable instance
  * Disallow async callable class instances as callable
  * Fix root_path in WebSocket Connection Scope</changelog>
  <changelog author="dmueller@suse.com" date="1673092800">- update to 3.6.0:
  * Two new functions are added to the ``asgiref.sync`` module:
    ``iscoroutinefunction()`` and ``markcoroutinefunction()``.
  * Python 3.12 deprecates ``asyncio.iscoroutinefunction()`` as an alias for
    ``inspect.iscoroutinefunction()``, whilst also removing the
    ``_is_coroutine`` marker.  The latter is replaced with the
    ``inspect.markcoroutinefunction`` decorator.
  * The new ``asgiref.sync`` functions are compatibility shims for these
    functions that can be used until Python 3.12 is the minimum supported
    version.
  * The ``loop`` argument to ``asgiref.timeout.timeout`` is deprecated. As per
    other ``asyncio`` based APIs, the running event loop is used by default.
    Note that ``asyncio`` provides timeout utilities from Python 3.11, and
    these should be preferred where available.
  * Support for the ``ASGI_THREADS`` environment variable, used by
    ``SyncToAsync``, is removed. In general, a running event-loop is not
    available to `asgiref` at import time, and so the default thread pool
    executor cannot be configured. Protocol servers, or applications, should set
    the default executor as required when configuring the event loop at
    application startup.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="3a36c818914bb6168e7f984f220af805519bcca7264114e786d292fa4ab46547" name="python-async_timeout" arch="src">
  <version epoch="0" ver="4.0.2" rel="150400.10.7.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1503576000">- initial package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1504872000">- Fix building
- Remove skip_python3 for python &lt; 3.4, the package already
  requires python &gt;= 3.4.</changelog>
  <changelog author="aloisio@gmx.com" date="1505217600">- Update to version 1.4.0
  * Implement `remaining` property (#20)
    + If timeout is not started yet or started unconstrained:
    `remaining` is `None`
    + If timeout is expired: `remaining` is `0.0`
    + All others: roughly amount of time before `TimeoutError` is triggered</changelog>
  <changelog author="aloisio@gmx.com" date="1508673600">- Update to version 2.0.0
  * Changed timeout &lt;= 0 behaviour
    + Backward incompatibility change, prior this version 0 was
    shortcut for None
    + when timeout &lt;= 0 TimeoutError raised faster</changelog>
  <changelog author="tbechtold@suse.com" date="1522065600">- rename package to python-async_timeout to match pypi name
- update to 2.0.1:
  * Fix ``PendingDeprecationWarning`` on Python 3.7 (#33)</changelog>
  <changelog author="adrian@suse.de" date="1529928000">- update to 3.0.0:
  * Drop Python 3.4, the minimal supported version is Python 3.5.3
  * Provide type annotations</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 3.0.1:
  * More aggressive typing (#48)
- Run tests</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Fix Obsolete/Provides to work with multiple python3 flavors</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 4.0.1
  * Fix regression:
  - Don't raise TimeoutError from timeout object that doesn't
    enter into async context manager
  - Use call_soon() for raising TimeoutError if deadline is
    reached on entering into async context manager (#258)
  * Make Timeout class available in __all__.
- Release 4.0.0
  * Implemented timeout_at(deadline) (#117)
  * Supported timeout.deadline and timeout.expired properties.
  * Dropped timeout.remaining property: it can be calculated as
    timeout.deadline - loop.time()
  * Dropped timeout.timeout property that returns a relative
    timeout based on the timeout object creation time; the absolute
    timeout.deadline should be used instead.
  * Added the deadline modification methods: timeout.reject(),
    timeout.shift(delay), timeout.update(deadline).
  * Deprecated synchronous context manager usage</changelog>
  <changelog author="dmueller@suse.com" date="1642248000">- update to 4.0.2:
  * Fix annotations on __exit__ and __aexit__
  * Use stdlib typing.final in Python 3.8+</changelog>
  <changelog author="daniel.garcia@suse.com" date="1679659200">- Remove not needed dependency typing_extensions, just needed for
  python &lt; 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f0ff5925bab57a5add6cc4b997e1f346e53c1bc186c820e6f16666e04a8ece3b" name="python-base" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="6670df990829c9359ce8993ddb851ba739625033e603b9f2ff6789c2dae44bee" name="python-base" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="433d78a54af5ae6cf5d40d7748a79d66371777581a92a458bf2349c97f43a7e2" name="python-base" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="0f8747c09d7e24a3b2f69ea364fd3e6ed1f0e43e30b4b94e7a7ff483a159a959" name="python-base" arch="src">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="49e8a7867aa17e837194e20e82236879f8ebca28da780575101146ec663d4fdc" name="python-base" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="b53256dfce15cf4cd3f4ee3dcee9db3df325fadb63f116e08ab74838af144f62" name="python-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="f86fff78c59cf5ff3b284c673e6913251b33493bdb2c17bdfdb02f4275870ebd" name="python-blinker" arch="src">
  <version epoch="0" ver="1.6.2" rel="150400.12.7.4"/>
  <changelog author="saschpe@suse.de" date="1340366400">- Update to version 1.2:
  + Added Signal.receiver_connected and
    Signal.receiver_disconnected per-Signal signals.
  + Deprecated the global 'receiver_connected' signal.
  + Verified Python 3.2 support (no changes needed!)</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1345032000">- python3 package added
- spec improved (files section)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1424606400">- update to version 1.3:
  * The global signal stash behind blinker.signal() is now backed
    by a regular name-to-Signal dictionary
  * blinker.Namespace is now built on a regular dict
  * Signal.connect('text-sender') uses an alterate hashing strategy
    to avoid sharp edges in text identity.</changelog>
  <changelog author="freitag@opensuse.org" date="1451822400">- update to version 1.4:
  * Verified Python 3.4 support (no changes needed)
  * Additional bookkeeping cleanup for non-ANY connections at disconnect
    time.
  * Added Signal._cleanup_bookeeping() to prune stale bookkeeping on
    demand</changelog>
  <changelog author="freitag@opensuse.org" date="1451822401">- Fixed doc section in file list</changelog>
  <changelog author="freitag@opensuse.org" date="1457697600">- use setup.py option to record file list for rpm package</changelog>
  <changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1494158400">- convert the package to singlespec
- call fdupes to fix duplicated files
- remove unneeded buildrequires: unzip
- remove unneded doc file that trigger rpmlint
- put the documentation in a separate sub-package</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1544011200">- Trim bias from description.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- use pytest instead of deprecated nose
- added patches
  https://github.com/jek/blinker/pull/60
  + python-blinker-remove-nose.patch</changelog>
  <changelog author="arun@gmx.de" date="1662984000">- specfile:
  * update copyright year
  * remove patch python-blinker-remove-nose.patch; included upstream
  * docs and license changed to .rst
  * build docs using Sphinx
- update to version 1.5:
  * Support Python &gt;= 3.7 and PyPy. Python 2, Python &lt; 3.7, and Jython
    may continue to work, but the next release will make incompatible
    changes.</changelog>
  <changelog author="mcepl@suse.com" date="1663156800">- Fix documentation generation.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Update to 1.6.2:
  * Type annotations are not evaluated at runtime. typing-extensions
    is not a runtime dependency. :pr:`94`
- 1.6.1:
  * Ensure that py.typed is present in the distributions (to enable
    other projects to use blinker's typing).
  * Require typing-extensions &gt; 4.2 to ensure it includes ParamSpec.
    :issue:`90`
- 1.6:
  * Add a muted context manager to temporarily turn off a signal.
    :pr:`84`
  * Allow int senders (alongside existing string senders). :pr:`83`
  * Add a send_async method to the Signal to allow signals to send to
    coroutine receivers. :pr:`76`
  * Update and modernise the project structure to match that used by
    the pallets projects. :pr:`77`
  * Add an intial set of type hints for the project.</changelog>
  <changelog author="mcepl@suse.com" date="1690372800">- Add no-stdpy-pyc.patch which makes Sphinx not to generate
  * .pyc files for the Python interpreter it uses for generating
  documentation.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690804800">- Remove no-stdpy-pyc.patch
- Call directly to the sphinx module with the specific python
  interpreter to avoid the usage of default python, bsc#1213698.</changelog>
</package>
<package pkgid="064a0744dcfe0707af48e2ee9168a3b9b6bfb0c0aa32bd5ff32690098dde4c1d" name="python-chardet" arch="src">
  <version epoch="0" ver="5.2.0" rel="150400.13.7.2"/>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1526385600">- Fix update-alternatives call in %postun.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1551182400">- Switch to multibuild to avoid buildcycles</changelog>
  <changelog author="tchvatal@suse.com" date="1562155200">- Add patch to fix build with pytest4:
  * pytest4.patch</changelog>
  <changelog author="mcepl@suse.com" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="jayvdb@gmail.com" date="1608465600">- Remove now unnecessary pytest4.patch and python-chardet-rpmlintrc
- Update to v4.0.0
  See https://github.com/chardet/chardet/compare/3.0.4...4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1633003200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="pgajdos@suse.com" date="1639137600">- pytest-runner is not required for build</changelog>
  <changelog author="code@bnavigator.de" date="1657022400">- Update to  5.0.0
  * This release is the first release of chardet that no longer
    supports Python &lt; 3.6
  * Added a prober for Johab Korean (#207, @grizlupo)
  * Added a prober for UTF-16/32 BE/LE (#109, #206, @jpz)
  * Added test data for Croatian, Czech, Hungarian, Polish, Slovak,
    Slovene, Greek, and Turkish, which should help prevent future
    errors with those languages
  * Improved XML tag filtering, which should improve accuracy for
    XML files (#208)
  * Tweaked SingleByteCharSetProber confidence to match latest
    uchardet (#209)
  * Made detect_all return child prober confidences (#210)
  * Updated examples in docs (#223, @domdfcoding)
  * Documentation fixes (#212, #224, #225, #226, #220, #221, #244
    from too many to mention)
  * Minor performance improvements (#252, @deedy5)
  * Add support for Python 3.10 when testing (#232, @jdufresne)
  * Lots of little development cycle improvements, mostly thanks to
    @jdufresne
- Canonicalize alternatives creation</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 5.1.0:
  * Add should_rename_legacy argument to most functions, which will rename
    older encodings to their more modern equivalents (e.g., GB2312 becomes
    GB18030) (#264, @dan-blanchard)
  * Add capital letter sharp S and ISO-8859-15 support
  * Add a prober for MacRoman encoding
  * Add --minimal flag to chardetect command
  * Add type annotations to the project and run mypy on CI
  * Add support for Python 3.11
  * Clarify LGPL version in License trove classifier (#255, @musicinmybrain)
  * Remove support for EOL Python 3.6 (#260, @jdufresne)
  * Remove unnecessary guards for non-falsey values (#259, @jdufresne)
  * Switch to Python 3.10 release in GitHub actions (#257, @jdufresne)
  * Remove setup.py in favor of build package (#262, @jdufresne)
  * Run tests on macos, Windows, and 3.11-dev (#267, @dan-blanchard)</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- skip python 3.6 builds</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1693828800">- update to 5.2.0:
  * Adds support for running chardet CLI via `python -m chardet`</changelog>
</package>
<package pkgid="9f00865b5dde66789686a2d74cb1e83359b9d6c96d7320a07464bcb2a2157056" name="python-constantly" arch="src">
  <version epoch="0" ver="15.1.0" rel="150400.12.7.2"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- initial packaging (version 15.0.1)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="e702df8def5d478609672da47f2c213fb8fdad4d5813e8678c4307394f245815" name="python-curses" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="d1d91f7df2c7fb15974e8977ecd69256a95e2a7f5e245469ce9717c6bcb0b0f0" name="python-curses" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="1d88d46033d70c1424609126e4d660206349295fdf2cf9f26916a7fcc4ebd952" name="python-curses" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="c2052b61d802d46644ae4da746cfea295a021b4c1ce326a709a40fe2172fac9e" name="python-curses" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="7dd24c5c27d92c48899ef7c03f5667629309479be80937e4621226b76f4f752d" name="python-decorator" arch="src">
  <version epoch="0" ver="5.1.1" rel="150400.12.7.4"/>
  <changelog author="dmueller@suse.com" date="1372161600">- update to 3.4.0:
  * Added the ability to use classes and generic callables as callers and
  implemented a signature-preserving contexmanager decorator. Fixed a bug
  with the signature f(**kw) in Python 3 and fixed a couple of doctests
  broken by Python 3.3, both issues pointed out by Dominic Sacré (18/10/2012)</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430568000">- update to version 3.4.2:
  * Same as 3.4.1, re-uploaded to PyPI
- additional changes from version 3.4.1:
  * Ported the repository from GoogleCode to GitHub and added
    Travis CI support
  * Tests are executed with the new command `python test.py -v`
  * setuptools is now mandatory in Python 3
  * The suggested installation tool is `pip`, not `easy_install`
  * Supported IronPython and other Python implementations without
    sys._getframe, as requested by Doug Blank
- remove python-nose from BuildRequires, unneeded
- replace README.txt with README.rst: changed upstream</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491048000">- Update to 4.0.11
  * Small improvements to the documentation and tested with Python 3.6
- Update to 4.0.10
  * Improved the documentation thanks to Tony Goodchild (zearin) who also
    provided a much better CSS than the one I was using.
- Update to 4.0.9
  * Same as 4.0.7 and 4.0.8, re-uploaded due to issues on PyPI.
- Update to 4.0.7
  * Switched to a new changelog format (the one in http://keepachangelog.com/)
    since it was contributed by Alexander Artemenko. Re-added a newline to support
    old version of Python, as requested by [azjps](https://github.com/azjps).
- Update to 4.0.6
  * Removed a file x.py accidentally entered in the tarball.
- Update to 4.0.5
  * Documented a quirk signaled by David Goldstein when writing decorators
    for functions with keyword arguments. Avoided copying the globals,
    as signaled by Benjamin Peterson.
- Update to 4.0.4
  * Included a patch from Zev Benjamin: now decorated functions play well
    with cProfile.
- Update to 4.0.3
  * Added a warning about the memoize example, as requested by Robert
    Buchholz.
- Update to 4.0.2
  * docs/README.rst was not included in MANIFEST.in by accident,
    thus breaking the source installation.
- Update to 4.0.1
  * Added docs directory and upload_docs command. Fixed bug with
    `__qualname__`, reported by Lucian Petrut.
- Update to 4.0.0
  * Removed the need for 2to3 by dropping the support for Python 2.5.
  * Added a MANIFEST.in file and produced a proper wheel. Improved
    the integration with setuptools so that `python setup.py test` works.
  * Reworked the documentation and introduced `decorator.decorated`.
  * Removed any dependence from `inspect.getargspec`, which is deprecated
    in Python 3.5, as signaled by Ralf Gommers.
  * Fixed `contextmanager` to work with Python 3.5.
  * Copied the `__qualname__` attribute, as requested by Frazer McLean.
  * Added a `dispatch_on` facility to implement generic functions.
- Implement single-spec version.</changelog>
  <changelog author="jmatejek@suse.com" date="1491393600">- fix source url</changelog>
  <changelog author="tbechtold@suse.com" date="1502280000">- update to 4.1.2:
  * Made it possible to define decorators converting coroutines into regular
    functions.
  * Changed the documentation build system to sphinx and uploaded the docs
    on readthedocs.org.
  * Support for Python 3.5 coroutines defined with `async def`, thanks to
    Victor-Nicolae Savu who raised the issue of `iscoroutinefunction` not
    giving the right answer for coroutines decorated with the decorator module.</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  - updated copyright year
- updated to version 4.2.1:
  * Fixed a regression breaking IPython reported by
    https://github.com/spapini .
- changes from version 4.2.0 :
  * Added a facility to define families of decorators (aka decorators
    with arguments) as requested by several users. Accepted a pylint
    patch by David Allouche.</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.3.0:
  * Extended the decorator family facility to work with positional
    arguments and updated the documentation. Removed
    decorator.getargspec and provided decorator.getfullargspec
    instead. This is convenient for users of Python 2.6/2.7, the
    others can just use inspect.getfullargspec.</changelog>
  <changelog author="jengelh@inai.de" date="1523966401">- Ensure neutrality of description.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1550059200">- update to version 4.3.2
  * now the decorator module can decorate generator functions by
    preserving their being generator functions
  * Set `python_requires='&gt;=2.6, !=3.0.*, !=3.1.*'` in setup.py
- update to version 4.3.1
  * Added a section "For the impatient" to the README, addressing
    an issue raised by Amir Malekpour.
  * Added support for Python 3.7.
  * Now  the path to the decorator module appears in the
    tracebacks, as suggested by a user at EuroPython 2018.</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Update to 4.4.0:
  * Fixed a regression with decorator factories breaking the case with no
    arguments by going back to the syntax used in version 4.2.</changelog>
  <changelog author="dmueller@suse.com" date="1576843200">- update to 4.4.1:
  Changed the description to "Decorators for Humans" are requested by
  several users. Fixed a .rst bug in the description as seen in PyPI.</changelog>
  <changelog author="dmueller@suse.com" date="1584187200">- update to 4.4.2:
  * removing the usage of `__file__`, that was breaking PyOxidizer.
  * fixes for the future Python 3.9.
  * some fixes for the future Python 3.10.</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 5.0.9:
  * Fixed a test breaking PyPy. Restored support for Sphinx.
  * Made the decorator module more robust when decorating builtin functions
    lacking dunder attributes, like `dict.__setitem__`.
  * The decorator module was not passing correctly the defaults inside the
    `*args` tuple, thanks to Dan Shult for the fix.
  * The decorator module was not copying the __module__ attribute anymore.
  * Dropped support for Python &lt; 3.5 with a substantial simplification of
    the code base (now building a decorator does not require calling "exec").
    Added a way to mimic functools.wraps-generated decorators.</changelog>
  <changelog author="mmachova@suse.com" date="1628164800">- Add upstream patch kwsyntax.patch</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 5.1.0:
  * Added a function `decoratorx` using the `FunctionMaker` and thus
    preserving the signature of `__code__` objects.
  * Sphinx was printing a few warnings when building the documentation
  * functions decorated with `decorator.contextmanager` were one-shot,
    as discovered by Alex Pizarro.
  * `decorator.decorator` was not passing the kwsyntax argument.
- drop kwsyntax.patch (usptream)</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.1.1:
  * cythonized functions can now be decorated.
  * fixed an issue in the `decorator_apply` example and
  * regression fix for the "fix" in version 5.1 broke
  ` decorator.contextmanager` even more. Both issues are now solved.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="af92d82be44d4baa1da8955945ba0ec959cafbb1dd174ea9f57bbe5bc221d5ac" name="python-demo" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="768b274fd831489bc0f39d0bf6a2259c0c9109ecf60ffcc4d304c236a5ffbb73" name="python-demo" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="503b52a9e9cead9a92566390a3ac6edebd28c1271a7d41f9d1fa1639c55e3c4b" name="python-demo" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="b7e041f53edb94394782cb9809b77f13d04eebf350711c2c55d8c5928e935743" name="python-demo" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="ef1b6738a6057f6d5d457dae1d4f2ccbc6eec526d1e9746ee95732454ad79e29" name="python-devel" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="5f652e957481f3c67830fb1d7bfe9e4ea534923ea5e71a8dc4bb7907749b46aa" name="python-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="0d4106ec1ee9469c01bbe945a7a301c421f14c2b460d6fe3c7f3a2b75cfd5d22" name="python-devel" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="ba10a00a1b89afa7f265dff4c2db329f71e7eb3d9b58df2807ae242131993e48" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="dbe2cafa29e8efecabacfe90d65bc51a50ab17a54b5fbaf9fad26664228741ad" name="python-doc" arch="noarch">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="f3aecd9c5e0c7ba66d1ec3eb5c96087711beade469766c1af0104d7e1bfcc3e9" name="python-doc" arch="src">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="c52ddd8eca01eba7e065446ce21ca9deb7bba49e3f059eb181a525acdb30466d" name="python-doc-pdf" arch="noarch">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="91c3f51288db16b6320d6bf33f2430954732eab74e6ef477719527ec59a08811" name="python-docker" arch="src">
  <version epoch="0" ver="4.2.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1506686400">- update to 2.4.2:
  * Add 'verbose' option for network inspect api
  * Fix misleading build method docs
  * Add support for ContainerSpec.TTY
  * Standardize handling of verbose param in inspect_network
  * Fix volume path passed by run to create_container
  * Only pull the 'latest' tag when testing images
  * Fix test cases for ``runtime`` config
  * Update image create error parsing
  * Improve robustness of remove_network integration test
  * Bump 2.2.0, update changelog
  * fix: Missing exception handling in split_port when no container port
  * Replace erroneous networks argument in containers.run with singular
  * Fix passing volumes to run with no host path
  * Update check_resource decorator to account for new resource names
  * Include tag in images.get after pulling if provided separately
  * Fix APIError status_code property for client/server errors
  * Ensure default timeout is used by API Client
  * Add prune_containers method
  * Add xfail mark to storageopt test
  * APIClient implementation of plugin methods
  * Add support for max_failure_ratio and monitor in UpdateConfig
  * Add appveyor.yml config
  * excludes requests 2.18.0 from compatible versions
  * Add prune_volumes method
  * fix #1625 where ImageCollection.build() could return early with incorrect
    image_id depending on docer build output
  * Ignore socket files in utils.tar
  * Add `target` argument to image building
  * Sorts model attributes in api docs alphabetically
  * Rewrite the split_port function using re
  * Add stop_timeout to create_container
  * Move reload_config func into the APIClient
  * Fix ImageNotFound detection
  * Update dockerVersions
  * Add missing support for `CpusetMems` parameter to HostConfig.
  * Implement cachefrom
  * Fix typo s/CpuSetCpus/CpusetCpus/
  * Add upgrade_plugin method
  * Handle multiple success messages during image building.
  * Add support for start_period in Healthcheck spec
  * Bump 2.0.2
  * removed duplicate mem_limit arg desc; type now consistent accross
    models (float-&gt;int)
  * added integration test for #1625 for ImageCollection.build() that verfies
    that the build method uses the last success message for extracting the image id
  * Allow events daemon command to read config.json
  * update docker-py test status code from 500 to 400
  * Adds a 'labels' property to the container model
  * Add support for recursive wildcard pattern in .dockerignore
  * Add missing secrets doc
  * init_path removed in Engine 17.05
  * Add prune_images method
  * Set infinite timeout for the `events` method
  * check NoneType before using
  * 2.3.0-dev
  * Add attributes for pickling
  * Allow configuring API version for integration test with env var
  * Correct the description of dns_opt option of create_container
  * Add support for ingress in create_network
  * DockerClient.secrets should be a @property
  * Adds a 'labels' property to the image model
  * Raise an error when passing an empty string to split_port
  * fix can't get a dict when Containers is None
  * new integration task linting for #1625
  * Adds an 'image' property to the container model
  * Add service_logs command to APIClient and logs command to models.Service
  * Fixed events command related unit tests by passing a timeout value
  * Compose 1.14.0 hack
  * Add service_logs integration test
  * Network model functions 'connect' and 'disconnect' did not accept or
    passthrough keyword arguments.
  * Modernize exec_api.py
  * Fix docstring of ImageCollection.get
  * removed unused/typoed param from models.containers.list docstring
  * Bump version 2.1.0
  * Plugins API documentation
  * Move default `timeout` into `from_env`
  * Fix _post_json behavior
  * Add prune_networks method
  * Allow port range like 8000-8010:80
  * Bump 2.3.0
  * Reference new methods in docs
  * Use experimental engine for testing in Jenkins/Makefile
  * update swarm remove test status code from 500 to &gt;= 400
  * Bump dev version
  * Update services.py
  * Add support for volume_driver in HostConfig
  * Add support for auto_remove in HostConfig
  * Add 'force' parameter in remove_volume
  * passing flake8 test
  * Add a reload_config function to the DaemonApiMixin
  * Closes #1588, image.tag does not return anything
  * Add df method
  * Convert mode argument to valid structure in create_service
  * Fix test issues
  * Add cpu_count, cpu_percent, cpus parameters to container HostConfig.
  * Add cachefrom to build docstring
  * Improve build result detection
  * Documentation fixes for login func
  * Add integration tests
  * Add ContainerSpec mounts test
  * Add create_plugin implementation
  * Remove integration test for APIClient.search method
  * Make sure data is written in prune test so space can be reclaimed
  * Add ability to set 'Hostname' on a Service.
  * fix type checking for nano_cpus
  * Remove duplicate line in exec_run documentation
  * Optional name on VolumeCollection.create
  * Raising error in case of invalid value of since kwarg on Container.logs
  * Add support for force_update in TaskTemplate
  * Change "Remote API" to "Engine API"
  * Better error handling, itterate on json stream directly.
  * Add support for storage_opt in host_config
  * Add a specific unit test for splitting port with IPv6
  * Add support for secrets in ContainerSpec
  * Add init parameter to container HostConfig
  * dev version
  * exec: add support for `Env`
  * Update mentions of the default API version in docs
  * Remove unsupported --experimental flag from Jenkinsfile
  * Add License to PyPi metadata
  * documentation change
  * Support credHelpers section in config.json
  * Add plugin API implementation to DockerClient
  * Flake8: Fix indent.
  * Implement secrets API
  * Fix Swarm model init to correctly pass arguments through to init_swarm
  * Move LinksTest to appropriate file
  * Docstring fixes for init and init_path
  * Fix the way the list of mounts is made for service.
  * docs renames: cpu_group-&gt;cpu_period, cpu_period-&gt;cpu_quota
  * Adjust tests and add newest engine version to Jenkinsfile
  * split_port should not break when passed a non-string argument
  * Add network_mode support to Client.build
  * Add init_path parameter to container HostConfig
  * Add support for placement preferences and platforms in TaskTemplate
  * Makes docs builds faster and ensures proper ownership
  * Add support for ``runtime`` in container create and run API
  * Fix milestone link
  * Add Plugin.upgrade to documentation
  * Rename cachefrom -&gt; cache_from
  * Formatting
  * Add 17.04 (CE) RC1 to list of engine versions to be tested
  * Fix if replicas is set to 0, Fixes #1572
  * cpus renamed to nano_cpus. Type and scale of nano_cpus are changed.
    Comments for new parameters are changed.
  * Bump test engine version
  * Minor typo correction
  * Update assert in test_create_with_restart_policy
  * Add reload() in docs for Container and Secret classes
  * Add tests for secret API implementation
  * Bump default API version to 1.26
- python-docker-py got renamed to python-docker.</changelog>
  <changelog author="arun@gmx.de" date="1507118400">- specfile:
  * added obsoletes %oldpython
- update to version 2.5.1:
  * Bugfixes
    + Fixed a bug where patterns ending with ** in .dockerignore would
    raise an exception
    + Fixed a bug where using attach with the stream argument set to
    False would raise an exception
- changes from version 2.5.0:
  * Features
    + Added support for the squash parameter in APIClient.build and
    DockerClient.images.build.
    + When using API version 1.23 or above, load_image will now return
    a generator of progress as JSON dicts.
    + remove_image now returns the content of the API's response.
  * Bugfixes
    + Fixed an issue where the auto_remove parameter in
    DockerClient.containers.run was not taken into account.
    + Fixed a bug where .dockerignore patterns starting with a slash
    were ignored.
    + Fixed an issue with the handling of ** patterns in .dockerignore
    + Fixed a bug where building FROM a private Docker Hub image when
    not using a cred store would fail.
    + Fixed a bug where calling create_service or update_service with
    task_template as a dict would raise an exception.
    + Fixed the handling of TTY-enabled containers in attach and
    exec_run.
    + DockerClient.containers.run will no longer attempt to stream
    logs if the log driver doesn't support the operation.
  * Miscellaneous
    + Added extra requirements for better TLS support on some
    platforms. These can be installed or required through the
    docker[tls] notation.</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6.1:
  * Bugfixes
    + Fixed a bug on Python 3 installations preventing the use of the
    attach and exec_run methods.
- changes from version 2.6.0:
  * Features
    + Added support for mounts in APIClient.create_host_config and
    DockerClient.containers.run
    + Added support for consistency, tmpfs_size and tmpfs_mode when
    creating mount objects.
    + Mount objects now support the tmpfs and npipe types.
    + Added support for extra_hosts in the build methods.
    + Added support for the configs API:
    o In APIClient: create_config, inspect_config, remove_config,
    configs
    o In DockerClient: configs.create, configs.get, configs.list
    and the Config model.
    o Added configs parameter to ContainerSpec. Each item in the
    configs list must be a docker.types.ConfigReference instance.
    + Added support for the following parameters when creating a
    ContainerSpec object: groups, open_stdin, read_only,
    stop_signal, helathcheck, hosts, ns_config, configs, privileges.
    + Added the following configuration classes to docker.types:
    ConfigReference, DNSConfig, Privileges, SwarmExternalCA.
    + Added support for driver in APIClient.create_secret and
    DockerClient.secrets.create.
    + Added support for scope in APIClient.inspect_network and
    APIClient.create_network, and their DockerClient equivalent.
    + Added support for the following parameters to create_swarm_spec:
    external_cas, labels, signing_ca_cert, signing_ca_key,
    ca_force_rotate, autolock_managers, log_driver. These additions
    also apply to DockerClient.swarm.init.
    + Added support for insert_defaults in APIClient.inspect_service
    and DockerClient.services.get.
  * Bugfixes
    + Fixed a bug where reading a 0-length frame in log streams would
    incorrectly interrupt streaming.
    + Fixed a bug where the id member on Swarm objects wasn't being
    populated.
    + Fixed a bug that would cause some data at the beginning of an
    upgraded connection stream (attach, exec_run) to disappear.</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 3.3.0:
  * Support for API version &lt; 1.21 has been removed.
  * A number of methods have been removed, renamed, and new ones be
    added. See https://github.com/docker/docker-py/releases
    for details.
- Make sure to run tests and properly name all the requirements</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 3.4.0:
  * Features
    + The APIClient and DockerClient constructors now accept a
    credstore_env parameter. When set, values in this dictionary are
    added to the environment when executing the credential store
    process.
  * Bugfixes
    + DockerClient.networks.prune now properly returns the operation's
    result
    + Fixed a bug that caused custom Dockerfile paths in a subfolder
    of the build context to be invalidated, preventing these builds
    from working
    + The plugin_privileges method can now be called for plugins
    requiring authentication to access
    + Fixed a bug that caused attempts to read a data stream over an
    unsecured TCP socket to crash on Windows clients
    + Fixed a bug where using the read_only parameter when creating a
    service using the DockerClient was being ignored
    + Fixed an issue where Service.scale would not properly update the
    service's mode, causing the operation to fail silently</changelog>
  <changelog author="arun@gmx.de" date="1530446400">- update to version 3.4.1:
  * Bugfixes
    + Fixed a bug that caused auth values in config files written
    using one of the legacy formats to be ignored
    + Fixed issues with handling of double-wildcard ** patterns in
    .dockerignore files</changelog>
  <changelog author="dmueller@suse.com" date="1531137600">- fix build for older python 3.x versions</changelog>
  <changelog author="arun@gmx.de" date="1533988800">- specfile:
  * updated requirement python-docker-pycreds to 0.3.0
- update to version 3.5.0:
  * Deprecation warning
    + Support for Python 3.3 will be dropped in the 4.0.0 release
  * Features
    + Updated dependencies to ensure support for Python 3.7
    environments
    + Added support for the uts_mode parameter in HostConfig
    + The UpdateConfig constructor now allows rollback as a valid
    value for failure_action
    + Added support for rollback_config in APIClient.create_service,
    APIClient.update_service, DockerClient.services.create and
    Service.update.
  * Bugfixes
    + Credential helpers are now properly leveraged by the build
    method
    + Fixed a bug that caused placement preferences to be ignored when
    provided to DockerClient.services.create
    + Fixed a bug that caused a user value of 0 to be ignored in
    APIClient.create_container and DockerClient.containers.create</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Fix build on older releases by not using new pytest syntax
  for test selection</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
  <changelog author="mmachova@suse.com" date="1717588800">- Add CVE-2024-35195.patch (bsc#1224788)
  * fix failure with updated python-requests</changelog>
</package>
<package pkgid="2ab5876c2a50a8e02c5b6fb4d6ae66a23e4759470d6b47b16336016750218c0a" name="python-fluidity-sm" arch="src">
  <version epoch="0" ver="0.2.0" rel="150400.10.7.2"/>
  <changelog author="tchvatal@suse.com" date="1533988800">- Initial package, required by python-invoke, was bundled</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="7a1b67b94530f952031e2365129eec205211ec4c7377aee52beb7c58109b9ae5" name="python-frozenlist" arch="src">
  <version epoch="0" ver="1.3.3" rel="150400.9.7.2"/>
  <changelog author="jayvdb@gmail.com" date="1606651200">- Initial spec for v1.1.1</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 1.2.0
  * FrozenList now supports being used as a generic type as per PEP
    585, e.g. frozen_int_list: FrozenList[int] (requires Python 3.9
    or newer). #172
  * Added support for Python 3.10. #227
  * Started shipping platform-specific wheels with the musl tag
    targeting typical Alpine Linux runtimes. #227
  * Started shipping platform-specific arm64 wheels for Apple
    Silicon. #227
- Cythonize
- Required by some aio packages.</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 1.3.0:
  * Do not install C sources with binary distributions.
  * Dropped Python 3.6 support</changelog>
  <changelog author="yarunachalam@suse.com" date="1664366400">- update to 1.3.1
  * The published source distribution package became buildable under Python 3.11.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 1.3.3
  * Fixed CI runs when creating a new release, where new towncrier versions fail
    when the current version section is already present.
- Update to 1.3.2
  * Misc
    Updated the CI runs to better check for test results and to avoid
    deprecated syntax. #327</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f7199c43a443bd8170d6d9fdd4fc05f74af64ebabff8323a7359e7ea37784d7a" name="python-gdbm" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="cb26cd87ab92897016dbc63e9b31aea0e988b99cbe7ee429b4a6dccdeef5382c" name="python-gdbm" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="2b60ed4ed332a2416782b9f187a6ea8eb7bc02deeeef427f97eaf7b40259ebca" name="python-gdbm" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="2a3163a5096f2d1e25c82f9cffe63a68607b1445ebcb494a64809f3670153691" name="python-gdbm" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="eb51a2e18233340ce5466aee148b6b09c3c8980806b3bc99cbf4ca6e7a1af7c0" name="python-humanfriendly" arch="src">
  <version epoch="0" ver="10.0" rel="150400.13.7.4"/>
  <changelog author="mardnh@gmx.de" date="1476100800">- Update to version 2.1
  * Release 2.1: Support for sanitizing terminal output
  * Support for sanitizing terminal output
  * Merge #12: Update README.rst for new unit behaviour
  * Update README.rst for new unit behaviour
  * Release 2.0: Proper support for IEEE 1541 definitions of units? (fixes #4, merges #8 and #9)
  * Proper support for IEEE 1541 definitions of units?
  * Merge #9: Add note about IEEE 1541 definitions of units
  * Merge #8: Allow correct behavior of 'parse_size' and 'format_size'
  * Stop clearing coverage data on Travis CI :-)
  * Release 1.44.9 (fixes #10 and #11)
  * Restore Python 2.6 compatibility (#10 and #11)
  * Resolve timespan formatting issues (#10 and #11)
  * Reproduce timespan formatting issues reported in #10 and #11
  * Refactor makefile, switch to py.test, wheel support, etc.
  * Release 1.44.8 (fixes #7)
  * Don't test tags on Travis CI
  * Fix issue #7
  * Reproduce issue #7 in test suite
  * Minor improvements to setup script
  * Add note about IEEE 1541 definitions of units
  * Added unit tests
  * Implemented correct handling of prefixes based on IEEE 1540
- Fix source url
- Minor specfile cleanup</changelog>
  <changelog author="toddrme2178@gmail.com" date="1504699200">- Implement single-spec version.
- Update to version 4.4.1
  * No changelog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Update to version 4.8
  * Add coerce_pattern() function
  * Improve code consistency
- From version 4.7
  * Support background colors and 256 color mode
  * Tests for output(), message() and warning()
- From version 4.6
  * Support for bright terminal colors
- From version 4.5
  * Extend byte ranges, add RAM output to command line
- From version 4.4.2
  * Reduce clock source sensitivity* (MacOS on Travis CI)
  * Fix `Double requirement given' error
  * Try to fix Python 2.6 tests on Travis CI
  * Change Sphinx documentation theme
  * Bump copyright
  * Try to enable MacOS builds on Travis CI
  * Fix ImportError exception on Windows
- From version 4.4.1
  * Include docs to sdist
  * PEP-8 fail
  * Change cli test from 1.05 mm to 1.05 km
  * Another correction to test_cli
  * Corrected CLI format_length test
  * Aim for more CLI coverage
  * Add CLI tests for format-byte
  * Added size test cases
  * Size 1z is now valid
- From version 4.4
  * Add touch() to __all__
  * Make touch() create intermediate directories
  * Add humanfriendly.testing.touch() function
- From version 4.3
  * Don't log duplicate output in run_cli()
- From version 4.2
  * Reconfigure logging in run_cli()
- From version 4.1
  * Always log stderr as well in run_cli()
- From version 4.0
  * Improve humanfriendly.testing.run_cli() (backwards incompatible)
- From version 3.8
  * Make it easy to mock the $HOME directory
- From version 3.7
  * Customizable skipping of tests
  * Added .pyc to .gitignore
  * Added Exa, Zetta &amp; Yotta prefixes and tests
  * Added -S --format-bytes option to use powers of 1024 rather than 1000 from command line.
- From version 3.6.1
  * Improve robustness of Patched{Attribute,Item}
- From version 3.6
  * Make retry limit configurable
  * Refactor makefile and Travis CI configuration
- From version 3.5
  * Bug fix for TestCase.assertRaises()
  * Enhance TestCase.assertRaises()
- From version 3.4.1
  * Bug fix for Python 3 syntax incompatibility
- From version 3.4
  * Promote command line test function to public API
- From version 3.3
  * Add humanfriendly.testing module (unittest helpers)
  * Add humanfriendly.text.random_string() function
  * Define humanfriendly.text.__all__
  * Reorder functions in humanfriendly.text alphabetically
- From version 3.2
  * Auto-encode terminal output to avoid encoding errors
  * Remove unused import
- From version 3.1
  * Improve usage message parsing and rendering
- From version 3.0
  * Add Python 3.6 to tested versions
  * Silence flake8 complaints
  * Add min, mins tests
  * Support min, mins abbreviations for minutes
- From version 2.4
  * Restore Python 3 compatibility
  * Make usage() and show_pager() more user friendly
  * Remove redundant :py: prefixes in docstrings
  * Improve docstrings in setup.py
- From version 2.3.2
  * Bug fix: Don't hard code conditional dependencies in wheels
- From version 2.3.1
  * Fix parse_usage() tripping up on commas in option labels
  * Break test suite to reproduce parse_usage() bug
- From version 2.3
  * Switch to monotonic clock for timers
  * Bump copyright
  * Minor improvements to setup script
  * Improve intersphinx references
  * s/readthedocs.org/readthedocs.io/g
- From version 2.2.1
  * Fix timers being awkward as context managers
  * Reproduce timers being awkward as context managers
  * Minor improvements to reStructuredText in docstrings
- From version 2.2
  * Fix parse_date() choking on Unicode strings
  * Reproduce parse_date() bug in test suite
  * Fix flake8 warning
  * Only use readline hints in prompts when stdin is tty</changelog>
  <changelog author="ms@suse.com" date="1534248000">- Submission to SUSE:SLE-12-SP3:Update:PubClouds
  This commit tracks the submission for fate#326575
  and bsc#1103542</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update to 4.16.1:
  * Added humanfriendly.text.compact_empty_lines() function.
  * Enable optional html_to_ansi(data[, callback]) argument.
  * Added a code sample and screenshot to the HTMLConverter documentation.
  * Emit vertical whitespace for block tags like &lt;div&gt;, &lt;p&gt; and &lt;pre&gt; and post-process the generated output in __call__() to compact empty lines.
  * Don’t pre-process preformatted text using the user defined text callback.
  * Improve robustness against malformed HTML (previously an IndexError would be raised when a closing &lt;/a&gt; tag was encountered without a corresponding opening &lt;a&gt; tag).
  * Emit an ANSI reset code when HTMLConverter.close() is called and a style is still active (improves robustness against malformed HTML).
  * Support for 24-bit (RGB) terminal colors. Works by accepting a tuple or list with three integers representing an RGB (red, green, blue) color.
  * Support for italic text rendering on the terminal.
  * Make format_timespan() accept datetime.timedelta objects (fixes #27).
  * Add license key to setup.py script (pointed out to me in coloredlogs pull request #53).
  * Added the Timer.sleep() method to sleep “no more than” the given number of seconds.
  * Added the format_rst_table() function to render RST (reStructuredText) tables.
- Enable and make sure tests are run</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Move the Name declaration above lua code to work on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1548936000">- Update to 4.17:
  * compatibility with python 3.7</changelog>
  <changelog author="tchvatal@suse.com" date="1552392000">- Update to 4.18:
  * Added humanfriendly.text.generate_slug() function.
  * Fixed "invalid escape sequence" DeprecationWarning (pointed out by Python &gt;= 3.6).</changelog>
  <changelog author="tchvatal@suse.com" date="1553860800">- Simplify the multibuild conditioning and name creation</changelog>
  <changelog author="tchvatal@suse.com" date="1576065600">- Require full python stack for sqlite module</changelog>
  <changelog author="mcepl@suse.com" date="1581768000">- Update to 6.1:
  - Added a :pypy:`...` role for easy linking to packages on the
    Python Package Index, for details refer to
    :func:`humanfriendly.sphinx.pypi_role()`.
  - Wasted quite a bit of time debugging a MacOS failure on
    Travis CI caused by a broken man`pip` installation, fixed by
    using get-pip.py to bootstrap an installation that actually
    works wink.
  - Enable :class:`~humanfriendly.testing.MockedProgram` to
    customize the shell script code of mocked programs. This was
    added to make it easy to mock a program that is expected to
    generate specific output (I'm planning to use this in the
    :pypi:`linux-utils` test suite).
  - Defined __all__ for all public modules that previously lacked
    "export control" and decided to bump the major version number
    as a precaution:
  - These changes should not have any impact on backwards
    compatibility, unless I forgot entries, in which case
    callers can get :exc:`~exceptions.ImportError`
    exceptions...
  - Imports of public modules were previously exported
    (implicitly) and this pollutes code completion suggestions
    which in turn can encourage bad practices (not importing
    things using their "canonical" name).
  - I started developing the humanfriendly package years before
    I learned about the value of defining __all__ and so some
    modules lacked a definition until now. I decided that now
    was as good a time as any to add those definitions
    innocent.
  - Simplified the headings in docs/api.rst so that only the
    module names remain. This was done because Sphinx doesn't
    support nested links in HTML output and thus generated really
    weird "Table of Contents" listings.
  - Fixed the reStructuredText references in the documentation of
    :func:`~humanfriendly.prompts.prompt_for_choice()`. This
    function is imported from :mod:`humanfriendly.prompts` to
    :mod:`humanfriendly` (for backwards compatibility) where it
    can't use relative references to refer to the other functions
    in the :mod:`humanfriendly.prompts` module.
  - Embedded quite a few Python API references into recent
    changelog entries, just because I could (I heart what
    hyperlinks can do for the usability of technical
    documentation, it gives a lot more context).
  - Added custom :man:`...` role for easy linking to Linux manual
    pages to the :mod:`humanfriendly.sphinx` module.
  - Changed rendering of pretty tables to expand tab characters
    to spaces: Until now pretty tables did not take the variable
    width of tab characters into account which resulted in tables
    whose "line drawing characters" were visually misaligned.
    Tabs are now expanded to spaces using str.expandtabs().
  - Stop testing on Python 2.6 and drop official support. The
    world (including Travis CI) has moved on and preserving
    Python 2.6 compatibility was clearly starting to drag the
    project down...
  - I decided to bump the major version number because each of
    these changes can be considered backwards incompatible in one
    way or another and version numbers are cheap anyway so there
    stuck_out_tongue.</changelog>
  <changelog author="mcalabkova@suse.com" date="1585569600">- Update to 8.1
  * Make it possible to opt out of the output capturing that
    :func:`humanfriendly.testing.run_cli()` sets up by default.
  * Improve feature parity between :class:`humanfriendly.testing.CaptureOutput`
    and my :pypi:`capturer` package to the point where most of the
    :pypi:`humanfriendly` test suite can now run without :pypi:`capturer`.
  * Refactored the test suite to import all names separately instead of referring
    to identifiers via their modules (my preferences have changed since this code
    was written a long time ago).
  * Adopt :func:`functools.wraps()` to make decorator functions more robust.
  * Make the :class:`~humanfriendly.terminal.spinners.Spinner` class more
    customizable. The interval at which spinners are updated and the characters
    used to draw the animation of spinners can now be customized by callers.
    This was triggered by `executor issue #2`_.
  * Improve test skipping based on exception types.
  * The "deprecated imports" feature provided by :mod:`humanfriendly.deprecation`
    has been adopted to clean up the maze of (almost but not quite) cyclic import
    dependencies between modules.
  * HTML to ANSI functionality has been extracted to a new
    :mod:`humanfriendly.terminal.html` module.
  * Support for spinners has been extracted to a new
    :mod:`humanfriendly.terminal.spinners` module.
  * The use of positional arguments to initialize
    :class:`~humanfriendly.terminal.spinners.Spinner` objects has been deprecated
    using the new :func:`humanfriendly.deprecation.deprecated_args()` decorator
    function.
  * Added the :func:`humanfriendly.deprecation.deprecated_args()` decorator function
    which makes it easy to switch from positional arguments to keyword arguments
    without dropping backwards compatibility.
  * Accept pluralized disk size units (`#26`_). I'm not claiming this is a full
    solution to the problem, far from it. It does lessen the pain a bit (IMHO).
  * Make sure the selected pager is available before trying to run it. While
    testing :pypi:`humanfriendly` on Windows 10 I noticed that ``humanfriendly
  * -help`` resulted in nothing but a traceback, because :man:`less` wasn't
    available. That's not human friendly at all 😕 (even if it is Windows 😈).
  * Merge pull request `#24`_: Fix bug in :func:`~humanfriendly.parse_length()` that rounded floats.
  * Merge pull request `#32`_: Update hyperlinks in readme.
  * Merge pull request `#33`_: Drop support for Python 2.6 and 3.0-3.4
  * Merge pull request `#35`_: SVG badge in readme.
  * Merge pull request `#36`_: Add support for nanoseconds and microseconds time units
  * Fixed :func:`~humanfriendly.tables.format_rst_table()` omission from
    ``humanfriendly.tables.__all__``.
  * Start testing on Python 3.8 and 3.9-dev.
  * Emit an ANSI reset code when :func:`humanfriendly.terminal.html.HTMLConverter.close()`
  * Added the :func:`humanfriendly.terminal.html_to_ansi()` function which is a
  * Added ``humanfriendly.testing.TestCase.assertRaises()`` enhancements.
  * Define ``humanfriendly.text.__all__``.</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1629201600">- Update to 9.2
  Maintenance release:
  * Merged pull request `#46`_ which fixes several :pypi:`flake8` warnings.
  * Merged pull request `#49`_ which marks Python 3.9 support final.
  * Merged pull request `#51`_ which helps to stabilize the test suite.
  * Merged pull request `#52`_ which updates the :mod:`humanfriendly.sphinx`
    module to include Sphinx extension metadata that has become mandatory in a
    recent Sphinx release. After merging the pull request I added additional
    metadata including the version.
- from version 9.1
  * Added :func:`~humanfriendly.compat.on_macos()` function to detect Apple MacOS
    (I need this in an upcoming :pypi:`coloredlogs` release and don't want to have
    to think about how to detect MacOS again in the future 😇).
- from version 9.0
  The major version number was bumped because the bug fix for
  :func:`~humanfriendly.text.pluralize()` is backwards incompatible
  and (even though this seems like very "cosmetic" functionality)
  version numbers are cheap, so who cares 😉.
  * *Bug fixes:**
  * Changed :func:`~humanfriendly.format_number()` to properly support negative
    numbers (as suggested in `issue #40`_).
  * Changed :func:`~humanfriendly.text.pluralize()` to generate "1.5 seconds"
    instead of "1.5 second" (as suggested in `issue #43`_).
  * *Enhancements:**
  * Enhanced :func:`~humanfriendly.text.concatenate()` to support ``conjunction``
    and ``serial_comma`` keyword arguments (as suggested in `issue #30`_).
  * Added :func:`~humanfriendly.text.pluralize_raw()` to select singular or
    plural form without prefixing the count to the text that is returned.
- from version 8.2
  * Added a simple case insensitive dictionary implementation, for details refer to
    the new :mod:`humanfriendly.case` module.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to 10.0
  * *Noteworthy changes:**
  * Merged pull request `#45`_ to resolve the issue caused by the conditional
    :pypi:`pyreadline` requirement on Windows not supporting Python 3.9+.
  * Updated the readme to use Python 3 in the example (reported in issue `#56`_).
    Also added a mention of the ``humanfriendly --demo`` command.
  * Removed the ``humanfriendly.compat.unittest`` alias that presumably no-one is
    using at this point; it had been rendered useless quite a long time ago
    (requested in issue `#53`_).
  * *Internal changes:**
  * Merged pull request `#54`_ which migrates the :pypi:`humanfriendly` project
    from Travis CI to GitHub Actions and from Coveralls.io to Codecov.
  * Fixed a deprecation warning concerning ``setup.cfg`` and some Sphinx
    documentation errors.</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- do not require mock for build
- added patches
  fix https://github.com/xolox/python-humanfriendly/issues/62
  + python-humanfriendly-no-mock.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1659096000">- Add patch pytest-7-support.patch:
  * Support pytest &gt;= 7.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1659441600">- Remove unneeded BuildRequires on mock.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="591c66b695e7940c19c2152fe0328a19a648445b032e0367e267e82d7b639da5" name="python-hyperlink" arch="src">
  <version epoch="0" ver="21.0.0" rel="150400.12.7.4"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- initial packaging (version 17.2.1)</changelog>
  <changelog author="jengelh@inai.de" date="1499169601">- Replace description.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1558440000">- version update to 19.0.0
  * When passed to `str()` URLs now stringify to usable URL
    strings. (See #49)
  * Switched off of Python's built-in IDNA facilities to using the
    [idna](https://pypi.python.org/pypi/idna) package. Not only is it
    much more modern, it's also much more strict and correct in its
    output. (See #19 and #56)
  * Added new `DecodedURL` type with almost-identical API to the normal
    `URL`, except that it automatically handles reserved characters in
    argument values passed to its methods. (See #6, #11, #44)
  * Added top-level `parse()` convenience function that now represents
    the main entrypoint to hyperlink.
  * Accept dictionaries as ‘query=’ arguments, in addition to
    sequences of tuples (see #50)
  * `URL.child()` will no longer fail when child gets no segments (#42 and #43)
  * `URL.normalize()` now supports encoding stray/unmatched `%` characters
    in character-encoded fields (userinfo, path, query string, fragment)
    (see #61, #62)</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Add missing runtime dependency on idna</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 20.0.1:
  * CPython 3.7 and 3.8 and PyPy3 added to test matrix
  * Hyperlink now has type hints and they are now exported per
  [PEP 561](https://www.python.org/dev/peps/pep-0561/).
  * Several bugs related to hidden state were fixed, making it so that all data
  on a `URL` object (including `rooted` and `uses_netloc`) is reflected by and
  consistent with its textual representation.
  This does mean that sometimes these constructor arguments are ignored, if it
  would create invalid or unparseable URL text.</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- update to 21.0.0:
  * Update plus sign (+) handling to work with/like HTML form encoding (POST)
    by default, fixes #129, and associated roundtripping (#146).
  * Package IDNA tables.
  * Long overdue dependency bumps</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="a692228c465632715bcb74c45bc270c5e1c8f2ba4cd7cecea44198067b1572c5" name="python-idle" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="20c766da9caf2117e0e5cf80303cb63bd964f462a9a3db54e07063fc70adec15" name="python-idle" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="e57d1d00f7cb4b4ce025e60fc1a6fcb552df25347aa912afaae51559c52755b3" name="python-idle" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="ce03d1987f55751b9a0b33138c3d10831059894e88f83aa4730b26cdc804b6d1" name="python-idle" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="0018ad4ce781cab9092a46d23b84bda752b43bf826357e47c8818b733766b78e" name="python-idna" arch="src">
  <version epoch="0" ver="3.4" rel="150400.11.10.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * update copyright year
- update to version 2.7:
  * Update to Unicode 10.0.0.
  * No longer accepts dot-prefixed domains (e.g. ".example") as
    valid. This is to be more conformant with the UTS 46 spec. Users
    should strip dot prefixes from domains before processing.</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Update to version 2.8
  * Update to Unicode 11.0.0.
  * Provide more specific exceptions for some malformed labels.
- Add fdupes</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 2.9:
  - Update to Unicode 12.1.0.
  - Prohibit A-labels ending with a hyphen (Thanks, Julien Bernard!)
  - Future-proofing: Test on Python 3.7 and 3.8, don't immediately
    fail should Python 4 come along.
-   Made BSD 3-clause license clearer</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 2.10:
  - Update to Unicode 13.0.0.
  - Throws a more specific exception if "xn--" is provided as a label.
  - This is expected to be the last version that supports Python 2.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 3.1:
  - Ensure license is included in package (Thanks, Julien Schueller)
  - No longer mark wheel has universal (Thanks, Matthieu Darbois)
  - Test on PowerPC using Travis CI
  - Python 2 is no longer supported (the 2.x branch supports Python 2,
    use "idna&lt;3" in your requirements file if you need Python 2 support)
  - Support for V2 UTS 46 test vectors.</changelog>
  <changelog author="pgajdos@suse.com" date="1622030400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.2:
  * Add type hints (Thanks, Seth Michael Larson!)
  * Remove support for Python 3.4</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.3:
  - Update to Unicode 14.0.0
  - Update to in-line type annotations
  - Throw IDNAError exception correctly for some malformed input
  - Advertise support for Python 3.10
  - Improve testing regime on Github
  - Fix Russian typo in documentation</changelog>
  <changelog author="kastl@b1-systems.de" date="1656590400">- add version constraint for python-rpm-macros &gt;= 20220106.80d3756,
  otherwise this fails to build on 15.3 at '%pyunittest discover -v'</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 3.4:
  * Update to Unicode 15.0.0
  * Migrate to pyproject.toml for build information (PEP 621)
  * Correct another instance where generic exception was raised instead of
    IDNAError for malformed input
  * Source distribution uses zeroized file ownership for improved
    reproducibility</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="c126e1af56981b7be8272dd7af07dddf77540ea50719d8140b75e9356b98fb28" name="python-importlib-metadata" arch="src">
  <version epoch="0" ver="6.8.0" rel="150400.10.9.2"/>
  <changelog author="dmueller@suse.com" date="1614686400">- update to 3.7.0:
  * #131: Added ``packages_distributions`` to conveniently
    resolve a top-level package or module to its distribution(s).
  * #284: Introduces new ``EntryPoints`` object, a tuple of
    ``EntryPoint`` objects but with convenience properties for
    selecting and inspecting the results:
  - ``.select()`` accepts ``group`` or ``name`` keyword
    parameters and returns a new ``EntryPoints`` tuple
    with only those that match the selection.
  - ``.groups`` property presents all of the group names.
  - ``.names`` property presents the names of the entry points.
  - Item access (e.g. ``eps[name]``) retrieves a single
    entry point by name.
    ``entry_points`` now accepts "selection parameters",
    same as ``EntryPoint.select()``.
    ``entry_points()`` now provides a future-compatible
    ``SelectableGroups`` object that supplies the above interface
    but remains a dict for compatibility.
    In the future, ``entry_points()`` will return an
    ``EntryPoints`` object, but provide for backward
    compatibility with a deprecated  ``__getitem__``
    accessor by group and a ``get()`` method.
    If passing selection parameters to ``entry_points``, the
    future behavior is invoked and an ``EntryPoints`` is the
    result.
    Construction of entry points using
    ``dict([EntryPoint, ...])`` is now deprecated and raises
    an appropriate DeprecationWarning and will be removed in
    a future version.
  * #280: ``entry_points`` now only returns entry points for
    unique distributions (by name).</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 3.7.2:
  * Cleaned up cruft in entry_points docstring.
  * Internal refactoring to facilitate ``entry_points() -&gt; dict``
    deprecation.</changelog>
  <changelog author="code@bnavigator.de" date="1632139200">- Update to v4.8.1
  * #348: Restored support for EntryPoint access by item,
    deprecating support in the process. Users are advised to use
    direct member access instead of item-based access:
  - ep[0] -&gt; ep.name
  - ep[1] -&gt; ep.value
  - ep[2] -&gt; ep.group
  - ep[:] -&gt; ep.name, ep.value, ep.group
- Release v4.8.0
  * #337: Rewrote EntryPoint as a simple class, still immutable
    and still with the attributes, but without any expectation for
    namedtuple functionality such as _asdict.
- Release v4.7.1
  * #344: Fixed regression in packages_distributions when neither
    top-level.txt nor a files manifest is present.
- Release v4.7.0
  * #330: In packages_distributions, now infer top-level names
    from .files() when a top-level.txt (Setuptools-specific
    metadata) is not present.
- Release v4.6.4
  * #334: Correct SimplePath protocol to match pathlib protocol
    for __truediv__.
- Release v4.6.3
  * Moved workaround for #327 to _compat module.
- Release v4.6.2
  * bpo-44784: Avoid errors in test suite when DeprecationWarnings
    are treated as errors.
- Release v4.6.1
  * #327: Deprecation warnings now honor call stack variance on
    PyPy.
- Release v4.6.0
  * #326: Performance tests now rely on pytest-perf. To disable
    these tests, which require network access and a git checkout,
    pass -p no:perf to pytest.
- Release v4.5.0
  * #319: Remove SelectableGroups deprecation exception for flake8.
- Release v4.4.0
  * #300: Restore compatibility in the result from Distribution.
    entry_points (EntryPoints) to honor expectations in older
    implementations and issuing deprecation warnings for these
    cases:
  * EntryPoints objects are once again mutable, allowing for sort
    () and other list-based mutation operations. Avoid deprecation
    warnings by casting to a mutable sequence (e.g. list(dist.
    entry_points).sort()).
  * EntryPoints results once again allow for access by index. To
    avoid deprecation warnings, cast the result to a Sequence
    first (e.g. tuple(dist.entry_points)[0]).
- Release v4.3.1
  * #320: Fix issue where normalized name for eggs was incorrectly
    solicited, leading to metadata being unavailable for eggs.
- Release v4.3.0
  * #317: De-duplication of distributions no longer requires
    loading the full metadata for PathDistribution objects, entry
    point loading performance by ~10x.
- Release v4.2.0
  * Prefer f-strings to .format calls.
- Release v4.1.0
  * #312: Add support for metadata 2.2 (Dynamic field).
  * #315: Add SimplePath protocol for interface clarity in
    PathDistribution.
- Release v4.0.1
  * #306: Clearer guidance about compatibility in readme.
- Release v4.0.0
  * #304: PackageMetadata as returned by metadata() and
    Distribution.metadata() now provides normalized metadata
    honoring PEP 566:
  * If a long description is provided in the payload of the RFC
    822 value, it can be retrieved as the Description field.
  * Any multi-line values in the metadata will be returned as such.
  * For any multi-line values, line continuation characters are
    removed. This backward-incompatible change means that any
    projects relying on the RFC 822 line continuation characters
    being present must be tolerant to them having been removed.
  * Add a json property that provides the metadata converted to a
    JSON-compatible form per PEP 566.
- Release v3.10.1
  * Minor tweaks from CPython.
- Release v3.10.0
  * #295: Internal refactoring to unify section parsing logic.
- Release v3.9.1
  * #296: Exclude 'prepare' package.
  * #297: Fix ValueError when entry points contains comments.
- Release v3.9.0
  * Use of Mapping (dict) interfaces on SelectableGroups is now
    flagged as deprecated. Instead, users are advised to use the
    select interface for future compatibility.
  * Suppress the warning with this filter: ignore:SelectableGroups
    dict interface.
  * Or with this invocation in the Python environment: warnings.
    filterwarnings('ignore', 'SelectableGroups dict interface').
  * Preferably, switch to the select interface introduced in
    3.7.0. See the entry points documentation and changelog for
    the 3.6 release below for more detail.
  * For some use-cases, especially those that rely on importlib.
    metadata in Python 3.8 and 3.9 or those relying on older
    importlib_metadata (especially on Python 3.5 and earlier),
    backports.entry_points_selectable was created to ease the
    transition. Please have a look at that project if simply
    relying on importlib_metadata 3.6+ is not straightforward.
    Background in #298.
  * #283: Entry point parsing no longer relies on ConfigParser and
    instead uses a custom, one-pass parser to load the config,
    resulting in a ~20% performance improvement when loading entry
    points.
- Release v3.8.2
  * #293: Re-enabled lazy evaluation of path lookup through a
    FreezableDefaultDict.
- Release v3.8.1
  * #293: Workaround for error in distribution search.
- Release v3.8.0
  * #290: Add mtime-based caching for FastPath and its lookups,
    dramatically increasing performance for repeated distribution
    lookups.
- Release v3.7.3
  * Docs enhancements and cleanup following review in GH-24782.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 4.8.2:
  * #353: Fixed discovery of distributions when path is empty.</changelog>
  <changelog author="mcepl@suse.com" date="1640952000">- Update to 4.10.0:
  - #354: Removed Distribution._local factory. This
    functionality was created as a demonstration of the possible
    implementation. Now, the pep517 package provides this
    functionality directly through pep517.meta.load.
  - Require Python 3.7 or later.
  - #357: Fixed requirement generation from egg-info when a URL
    requirement is given.</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 4.10.1:
  - #361: Avoid potential REDoS in ``EntryPoint.pattern``.</changelog>
  <changelog author="dmueller@suse.com" date="1652097600">- update to 4.11.3:
  * #372: Removed cast of path items in FastPath, not needed.
  * #369: Fixed bug where ``EntryPoint.extras`` was returning
    match objects and not the extras strings.
  * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt``
    is empty, return an empty list.
  * bpo-46246: Added ``__slots__`` to ``EntryPoints``.
  * #365 and bpo-46546: Avoid leaking ``method_name`` in
    ``DeprecatedList``.</changelog>
  <changelog author="code@bnavigator.de" date="1652184000">- Prevent build for Python 3.6 which is not supported anymore
- Remove override to use deprecated setuptools usage</changelog>
  <changelog author="dmueller@suse.com" date="1654430400">- update to 4.11.4:
  * #379: In ``PathDistribution._name_from_stem``, avoid including
  parts of the extension in the result.
  * #381: In ``PathDistribution._normalized_name``, ensure names
  loaded from the stem of the filename are also normalized, ensuring
  duplicate entry points by packages varying only by non-normalized
  name are hidden.</changelog>
  <changelog author="dmueller@suse.com" date="1658750400">- update to 4.12.0:
  * py-93259: Now raise ``ValueError`` when ``None`` or an empty
    string are passed to ``Distribution.from_name`` (and other
    callers).</changelog>
  <changelog author="yarunachalam@suse.com" date="1666958400">- Update to version 5.0.0
  * #97, #284, #300: Removed compatibility shims for deprecated entry point interfaces.
- Update to version 4.13.0
  * #396: Added compatibility for PathDistributions originating from Python 3.8 and 3.9.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670328000">- Update to versino 5.1.0
  [#415]: Instrument SimplePath with generic support.</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.0:
  * #419: Declared ``Distribution`` as an abstract class, enforcing
  definition of abstract methods in instantiated subclasses. It's no
  longer possible to instantiate a ``Distribution`` or any subclasses
  unless they define the abstract methods.
  * #371: Deprecated expectation that ``PackageMetadata.__getitem__``
  will return ``None`` for missing keys. In the future, it will raise a
  ``KeyError``.</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 6.1.0:
  * ``packages_distributions`` now honors packages and
    modules with Python modules that not ``.py`` sources (e.g.
    ``.pyc``, *   ``.so``).
  * #434: Expand protocol for ``PackageMetadata.get_all`` to
    match the upstream implementation of ``email.message.Message.get_all``
    in python/typeshed#9620.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1680523200">- Remove unneeded BuildRequires on pep517.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 6.3.0:
  * #115: Support ``installed-files.txt`` for
    ``Distribution.files`` when present.
  * #442: Fixed issue introduced in v6.1.0 where non-importable
  * names (metadata dirs) began appearing in ``packages_distributions``.
  * #384: ``PackageMetadata`` now stipulates an additional
    ``get`` method allowing for easy querying of metadata keys that may
    not be present</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 6.6.0:
  * Expanded type annotations.
  * python/cpython#103661: Removed excess error suppression in
    ``_read_files_egginfo_installed`` and fixed path handling
    on Windows.
  * #422: Removed ABC metaclass from ``Distribution`` and instead
    deprecated construction of ``Distribution`` objects without
    concrete methods.
  * Updated docs with tweaks from upstream CPython.
  * Consolidated some behaviors in tests around ``_path``.
  * Added type annotation for ``Distribution.read_text``.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 6.8.0:
  * Require Python 3.8 or later.
  * #453: When inferring top-level names that are importable for
    distributions in ``package_distributions``, now symlinks to
    other directories are honored.</changelog>
</package>
<package pkgid="064fd0c4079aa59261c47cf8d18aedc4864f5b110fe4231152f4a8723fba7632" name="python-incremental" arch="src">
  <version epoch="0" ver="22.10.0" rel="150400.3.7.2"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- Initial packaging (version 17.5.0)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1559736000">- run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Switch to multibuild to avoid build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1588161600">- Skip two tests that fail due to changes in pytest framework
  needs to be fixed by upstream</changelog>
  <changelog author="dmueller@suse.com" date="1620561600">- update to 21.3.0:
  - The output of incremental is now compatible with Black (#56, #60)
  - Incremental now properly supports PEP 440-compliant dev, rc, post suffixes (#62)
  - Incremental now properly supports PEP 440-compliant post releases (#37)
  - Incremental will no longer attempt to read git or svn repositories to see if
    the project is running from a checkout. (#30, #31, #32)</changelog>
  <changelog author="dimstar@opensuse.org" date="1640260800">- Do not use %{python_module …} for suggests, as this would suggest
  all python flavors. Rather rely on the python singlespec macros
  to rewrite as needed.</changelog>
  <changelog author="dmueller@suse.com" date="1665921600">- update to 22.10.0:
  * Incremental now supports type-checking with Mypy (#69)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="6712ad2b2679c7d429f6b59d2a757da6b3d581de2b462404ee0060a421ae830c" name="python-invoke" arch="src">
  <version epoch="0" ver="2.1.2" rel="150400.10.7.4"/>
  <changelog author="tchvatal@suse.com" date="1533988800">- Update to 1.1.1:
  * Various tweaks for pytest and new py releases support
- Switch to multibuild to run tests</changelog>
  <changelog author="tchvatal@suse.com" date="1533988801">- Add patch to not use vendored libs:
  * 0001-Make-test-fallback-to-system-modules-when-vendorized.patch
- Remove unneeded deps
- Remove the multibuild again as we no longer cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 1.2.0:
  * [Feature] #301: (via #414) Overhaul tab completion mechanisms so users can print a completion script which automatically matches the emitting binary’s configured names (compared to the previous hardcoded scripts, which only worked for inv/invoke by default). Thanks to Nicolas Höning for the foundational patchset.</changelog>
  <changelog author="tchvatal@suse.com" date="1563537600">- Restrict pytest5 and pytest4 for now upstream tests only with
  pytest3...</changelog>
  <changelog author="tchvatal@suse.com" date="1563969600">- Disable tests for now as they break with new pytest-relaxed
- Add another patch fixing errors with new pytest:
  * pytest4.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1565611200">- Update to version 1.3.0
  * Allow the configuration system to override which Executor
    subclass to use when executing tasks.
  * Add support for command timeouts, i.e. the ability to add an
    upper bound on how long a call to run may take to execute.
  * Add basic dry-run support, in the form of a new --dry CLI option.
  * Add a new Runner method, close_proc_stdin, and call it when
    standard input processing detects an EOF.</changelog>
  <changelog author="tchvatal@suse.com" date="1568721600">- Update patch pytest4.patch to make it really work with new pytests</changelog>
  <changelog author="mcalabkova@suse.com" date="1586865600">- Update to version 1.4.1
  * Fix an issue with `~invoke.run` &amp; friends having intermittent
    problems at exit time.
  * Many other fixes.</changelog>
  <changelog author="code@bnavigator.de" date="1602849600">- disable test suite with bcond because of unmaintained
  pytest-relaxed gh#bitprophet/pytest-relaxed#12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1629288000">- Update to version 1.6.0
  * Version bump for next release
  * Return to using print() and no newline in echo_format
  * Blacken
  * Changelog re #791
  * s/output_format/echo_format/g
  * Fix whitespace
  * Contact methods update :(
  * Adding support for a custom output format via run.echo
  * Fix typo
  * Tweak versionadded/changed bits for new param.
- from version 1.5.1
  * Alphabetize run() kwarg param declarations in docstring
  * Document dry kwarg for run() in docstring
  * Treat whitespace-only docstrings as empty docstrings.
- from version 1.5.0
  * Changelog, docstring and test tweak re #607, re #454
  * Tweaks re #611
  * Changelog re #409, re #398, re #611, re #580
  * Tweak #197 changelog to link to modified API member
  * Stop publishing bogus codecov reports from Travis
  * Docs and changelog re #197, closes #197
  * Realized OP's impl was overkill/caused bugs. Just set name.
  * Use identity testing in collection task lookup asserts
  * Refactor default task/collection collision &amp; enhanced its tests
  * Minor tweaks to update #197
  * Upgrade codecov client, prev version cannot talk to their object store
  * Fix small pile of minor doc reference errors
  * Changelog re coverage tweaks
  * Test Exit more thoroughly
  * Improve test coverage of Failure hierarchy repr()
  * Not sure why UnexpectedExit repr override __repr__ and not _repr
  * Blacken
  * Bump version for release/testing
  * Populate MockContext NotImplementedErrors with triggering command
  * Enhance MockContext a whole bunch
  * Enhance testing concepts doc
  * Python packaging guide is no longer using /en/latest URL
  * Blacken, flake8
  * Populate Result.command automatically within MockContext methods
  * Wrap MockContext methods in actual Mock when present
  * Expand sys.modules cleaner in conftest to clean EVERYTHING
  * Fix inaccurate indentation for MockContext versionadded directive
  * Needed to mark this bug major because it was in the 1.2 line which
    hasn't since gotten any bugfix releases
  * Grumble forgot a backported note
  * Add test: mismatched help text raises error
  * Add tests: parameter help defined with underscores
  * Cosmetic: satisfy black
  * Simplify if/else/if/else a bit
  * Fix bug if didn't give help for param.
  * Add error when gave help for typoed param #398
  * Fix help text behavior for params with underscores in name #409
  * Skip Path unit test if Path can't be imported
  * Clarify why we do str() on a possible str object
  * Make Travis happy for Python 2.7 and pypy
  * Satisfy flake8 compatibility
  * Allow Pathlib.path objects to be used with Context.cd()
  * Allow subcollections to be defaults of parent collections</changelog>
  <changelog author="code@bnavigator.de" date="1640692800">- Add fix-yaml-loader.patch, PyYAML 6 broke it.</changelog>
  <changelog author="pgajdos@suse.com" date="1651665600">- version update to 1.7.0
  * [Feature] #845: Env vars explicitly supplied to sudo (via its env kwarg) are now
    explicitly preserved via sudo’s --preserve-env argument. Patch courtesy of Benno Rice.
  * [Feature] #793: Add a new tasks.ignore_unknown_help config option for users who hand
    their tasks centrally-defined argument help dictionaries; it defaults to False but
    such users may set it to True to avoid exceptions. Thanks to @Allu2 for the report.
  * [Support]: Switch our continuous integration service from Travis-CI to Circle-CI,
    plus related and necessary updates to various administrative config files, management
    tasks and metadata. Including but not limited to:
  * Enhanced PyPI-level metadata/links
  * Split out tool config data from setup.cfg
  * Enhance execution &amp; coverage of unit vs integration tests under CI
  * [Support] #803: Upgrade our vendored PyYAML from 3.11 to 5.4.1; this should both
    supply a number of security fixes, and address problems loading project-level YAML
    config files under Python 3.10. Fix via Andreas Rammhold.
  * [Support]: Switch to using yaml.safe_load for loading config files. This avoids some
    warnings under newer PyYAML versions and is also, in a shocking twist, more secure.
- do not require python-mock for build, testsuite is not run
- modified patches
  % 0001-Make-test-fallback-to-system-modules-when-vendorized.patch (refreshed)
- deleted patches
  - fix-yaml-loader.patch (upstreamed)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.7.1:
  * :bug:`659` Improve behavior under ``nohup``, which causes stdin to become an
    undetectably-unreadable (but otherwise legit) file descriptor. Previously
    this led to `OSError` even if you weren't expecting anything on stdin; we now
    trap this specific case and silently ignore it, allowing execution to
    continue. Thanks to ``@kingkisskill`` for initial report and to Ryan Stoner
    for followup and workshopping.</changelog>
  <changelog author="dmueller@suse.com" date="1665921600">- update to 1.7.3:
  * Fix a non-fatal bug in our setup.py long_description generation causing
    1.7.0-1.7.2 to have malformed description text on PyPI.
  * Fix errors thrown when comparing Task objects to non-Task objects; such
    comparisons are now always false.
  * Refactor CLI parser instantiation such that the tasks.ignore_unknown_help
    feature (added in 1.7) works when Invoke is run in --complete mode, i.e. in
    tab-completion scripts.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1683806400">- Update to 2.1.0:
  - [Bug] #910: Add more rigor around subprocess/runner shutdown
    to avoid spurious exceptions &amp; also fix downstream issues in
    libraries like Fabric. Reported by Orlando Rodríguez.
  - [Bug] #934: The importlib upgrade in 2.1 had a corner case
    bug (regarding from . import &lt;submodule&gt; functionality within
    package-like task trees) which in turn exposed a false-pass
    in our test suite. Both have now been fixed. Thanks to Greg
    Meyer and Robert J. Berger for the bug reports.
  - [Bug] #910: Add more rigor around subprocess/runner shutdown
    to avoid spurious exceptions &amp; also fix downstream issues in
    libraries like Fabric. Reported by Orlando Rodríguez.
  - [Support] #901: (via #903) Tweak test suite setup methods to
    be named setup_method so pytest stops whining about it. Patch
    via Jesse P. Johnson.
  - [Bug] #376: Resolve equality comparison bug for
    non-collections. Patch via Jesse P. Johnson
  - [Support] #901: (via #903) Tweak test suite setup methods to
    be named setup_method so pytest stops whining about it. Patch
    via Jesse P. Johnson.
  - [Support] #906: Implement type hints and type checking
    tests with mypy to reduce errors and impove code
    documentation. Patches by Jesse P. Johnson and review by Sam
    Bull.
  - [Support] #675: Implement importlib and deprecate imp
    module. Patches provided by Jesse P. Johnson
  - [Support]: Task.argspec has changed its return value; it now
    returns an inspect.Signature derived from that of the task’s
    body callable.
  - Warning
    This change is backwards incompatible if you were using this
    method directly.
    [Support]: Remove support for, and imports related to,
    all Python versions less than 3.6 - including Python
    2. This also includes updates to vendored packages, such
    as removing six and upgrading lexicon to the latest
    version; and also treatment of things like Mock use within
    invoke.context.MockContext (which now expects stdlib’s
    unittest.mock instead of hunting for the old standalone mock
    library).
    This change is backwards incompatible in the following scenarios:
  - You use Python &lt;3.6. Shouldn’t be an issue as we now
    specify python_requires in packaging metadata.
  - You call invoke.util.encode_output manually for some
    reason. (This became a noop under Python 3, so just…remove
    it!)
  - You use invoke.context.MockContext; its repeat init kwarg
    changed its default value from False to True. This probably
    won’t bite you, but we mention it just in case you somehow
    relied upon the legacy behavior.
  - You subclass invoke.runners.Runner and/or have had to
    interact with its stop or stop_timer methods. The latter
    has been merged into the former, and if you are overriding
    stop, you’ll want to make sure you now call super()
    somewhere if you were not already.
- Remove upstreamed patches:
  - 0001-Make-test-fallback-to-system-modules-when-vendorized.patch
  - pytest4.patch
- Add remove-icecream.patch to remove unnecessary dependence on
  icecream module.
- Skip temporarily failing tests (gh#pyinvoke/invoke#705).</changelog>
  <changelog author="dmueller@suse.com" date="1684065600">- update to 2.1.1:
  * The `importlib` upgrade in 2.1 had a corner case
    bug (regarding ``from . import &lt;submodule&gt;`` functionality
    within package-like task trees  which in turn exposed a
    false-pass in our test suite. Both have now been fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1684238400">- break python-invocations, invoke cycle on tests</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- update to 2.1.2:
  * Make sure ``py.typed`` is in our packaging
    manifest; without it, users working from a regular
    installation can't perform type checks.</changelog>
</package>
<package pkgid="14297897a9564352bc4e4b9f91582c702031f98d668dfb3d8bc255a3c1010f2e" name="python-isodate" arch="src">
  <version epoch="0" ver="0.6.1" rel="150400.12.7.2"/>
  <changelog author="jfunk@funktronics.ca" date="1337342400">- Initial release</changelog>
  <changelog author="saschpe@suse.de" date="1353672000">- Update to version 0.4.9:
  + support pickling FixedOffset instances
  + make sure parsed fractional seconds are in microseconds
  + add leading zeros when formattig microseconds (Jarom Loveridge)
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1358078400">- Initial python3 support</changelog>
  <changelog author="p.drouand@gmail.com" date="1366113600">- Remove BuildRequires: python-2to3, useless since included in main
  python devel package
- Add Requires: python3; fix build for OpenSUSE &lt;= 12.2</changelog>
  <changelog author="toddrme2178@gmail.com" date="1366200000">- Re-add python-2to3.  It is needed for OpenSUSE &lt;= 12.2</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430913600">- update to version 0.5.1:
  * fixed pickling of Duration objects
  * raise ISO8601Error when there is no 'T' separator in datetime
    strings
- additional changes from version 0.5.0:
  * ISO8601Error are subclasses of ValueError now
  * improve compatibility across various python variants and
    versions
  * raise exceptions when using fractional years and months in date
    maths with durations
  * renamed method todatetime on Duraction objects to totimedelta
- pass -q to test to avoid spamming the build log
- rename README.txt to README.rst: changed upstream</changelog>
  <changelog author="tbechtold@suse.com" date="1485777600">- update to 0.5.4:
  - Fix parsing of Periods (Fabien Bochu)
  - Make Duration objects hashable (Geoffrey Fairchild)
  - Add multiplication to duration (Reinoud Elhorst)
- Use pypi.io as Source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493812800">- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- update to version 0.6.0:
  - Support incomplete month date (Fabien Loffredo)
  - Rely on duck typing when doing duration maths
  - Support ':' as separator in fractional time zones (usrenmae)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1537963200">- Include in SLE-15 (bsc#1109694)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1622030400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1636372800">- add six dependency</changelog>
  <changelog author="steven.kowalik@suse.com" date="1639396800">- Add patch coerce-decimal-to-int-python-310.patch:
  * Support Python 3.10.</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 0.6.1:
  * support python 3.10 ()
  * last version to support py 2.7
- drop coerce-decimal-to-int-python-310.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1666353600">- added patches
  https://github.com/gweis/isodate/commit/07d1602048083415bc22dc72cff152c9c2e0e021
  + python-isodate-no-six.patch</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="4abe4f5c017cd3f109911df7c057591236b7f83bb2866266ac8a213c8728765f" name="python-lexicon" arch="src">
  <version epoch="0" ver="2.0.1" rel="150400.10.7.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1520078400">- initial package for version 1.0.0
- add add_test_init.patch to fix execution of tests</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Update descriptions.</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Conflict with python-dns-lexicon that provides same namespace</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631880000">- Update to 2.0.1:
  * Fix up some project metadata.
  * Dropped support for Python &lt;3.6
  * Added a _version submodule and imported its dunder-attributes into
    the top level module
  * Migrated CI to CircleCI (from Travis)
  * Migrated tests to pytest(-relaxed)
  * Moved changelog to stub Sphinx project for Releases plugin
  * Changed README to ReStructured Text (from Markdown)
- Dropped patch add_test_init.patch, no longer required.
- Added patch add-pytest-ini.patch:
  * Add the pytest.ini file that isn't included in the source distribution
    so the testsuite works.</changelog>
  <changelog author="code@bnavigator.de" date="1639396800">- Don't test on python310 because of pytest-relaxed not supporting
  Pytest 6 -- gh#bitprophet/pytest-relaxed#12</changelog>
  <changelog author="steven.kowalik@suse.com" date="1646913600">- pytest-relaxed now supports pytest 6, so test on all python versions.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="d2a841374738ae658223bc84f56b52ce26340d5ca7f68b30dffbca4b739690f2" name="python-libmount" arch="src">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="2a1f4db10efbca245b3c569bb9ed618f1c5b06801e7d4f59b1ccc1efc3441a4e" name="python-marshmallow" arch="src">
  <version epoch="0" ver="3.20.2" rel="150400.9.7.1"/>
  <changelog author="tchvatal@suse.com" date="1564574400">- Add patch to fix building with pytest5 from upstream git:
  * pytest5.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1566820800">- Update to 3.0.1
  * Many changes, some of them breaking. For example:
  * Remove support for Python 2 (#1120). Only Python&gt;=3.5 is supported.
  * Allow input value to be included in error messages for a number of fields.
  * Change ordering of keys and values arguments to fields.Dict.
  * Please read upstream changelog.
- Drop upstreamed patches reproducible.patch and pytest5.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 3.0.3:
  * Handle when data_key is an empty string
  * Includes bug fix from 2.20.3
  * Fix incorrect super() call in SchemaMeta.__init__</changelog>
  <changelog author="mcalabkova@suse.com" date="1570536000">- Update to 3.2.1
  * Fix typing for Schema.dump[s]
  * Fix compatibility with Python &lt; 3.5.3
  * Fix bug that raised an uncaught error when a nested schema
    instance had an unpickleable object in its context
  * Fix propagating dot-delimited only and exclude parameters to
    nested schema instances
  * Few bug fixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1573646400">- Update to version 3.2.2:
  - Bug fixes:
  - Don't load fields for which ``load_only`` and ``dump_only`` are both ``True`` (:pr:`1448`).
  - Fix types in ``marshmallow.validate`` (:pr:`1446`).
  - Support:
  - Test against Python 3.8 (pr:`1431`).</changelog>
  <changelog author="pgajdos@suse.com" date="1585742400">- version update to 3.5.1
  - Includes bug fix from 2.21.0.
  - Fix list of nullable nested fields ``List(Nested(Field, allow_none=True)``
    (:issue:`1497`). Because this fix reverts an optimization introduced to
    speed-up serialization and deserialization of lists of nested fields, a
    negative impact on performance in this specific case is expected.
  - Improve type coverage (:issue:`1479`). Thanks :user:`Reskov`.
  - Fix typing for ``data`` param of ``Schema.load`` and ``ValidationError`` (:issue:`1492`).
    Thanks :user:`mehdigmira` for reporting and thanks :user:`dfirst` for the PR.
  - Remove unnecessary typecasts (:pr:`1500`). Thanks :user:`hukkinj1`.
  - Remove useless ``_serialize`` override in ``UUID`` field (:pr:`1489`).
  - ``fields.Nested`` may take a callable that returns a schema instance.
    Use this to resolve order-of-declaration issues when schemas nest each other (:issue:`1146`).
  - Passing the string ``"self"`` to ``fields.Nested`` is deprecated.
    Use a callable instead.
  - Fix typing for ``Number._format_num`` (:pr:`1466`). Thanks :user:`hukkinj1`.
  - Make mypy stricter and remove dead code (:pr:`1467`). Thanks again, :user:`hukkinj1`.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1598011200">- Update to 3.7.1:
  * Deprecations:
    + `marshmallow.pprint` is deprecated and will be removed in marshmallow 4 (:issue:`1588`).
  * Features:
    + Add ``validators.ContainsNoneOf`` (:issue:`1528`).
  * Bug fixes:
    + Fix typing in ``class_registry`` (:pr:`1574`). Thanks :user:`mahenzon`.
    + Fix passing ``only`` and ``exclude`` to ``Nested`` with an ordered ``Schema`` (:pr:`1627`).
    + ``fields.Boolean`` correctly serializes non-hashable types (:pr:`1633`).
- Refresh patch python-marshmallow-no-version-warning.patch</changelog>
  <changelog author="code@bnavigator.de" date="1619092800">- Update to 3.11.1
  * Fix treatment of dotted keys when unknown=INCLUDE (#1506).
    Thanks @rbu for reporting and thanks @sirosen for the fix
    (#1745).
- Release 3.11.0
  * Add fields.IPInterface, fields.IPv4Interface, and
    IPv6Interface (#1733). Thanks @madeinoz67 for the suggestion
    and the PR.
  * Raise AttributeError for missing methods when using fields.
    Method (#1675). Thanks @lassandroan.
  * Remove unnecessary hasattr and getattr checks in Field (#1770).
- Release 3.10.0
  * Passing field metadata via keyword arguments is deprecated and
    will be removed in marshmallow 4 (#1350). Use the explicit
    metadata=... argument instead. Thanks @sirosen.
- Release 3.9.1
  * Cast to mapping type in Mapping.serialize and Mapping.
    deserialize (#1685).
  * Fix bug letting Dict pass invalid dict on deserialization when
    no key or value Field is specified (#1685).
- Release 3.9.0
  * Add format argument to fields.Time and timeformat class Meta
    option (#686). Thanks @BennyAlex for the suggestion and thanks
    @infinityxxx for the PR.
  * Remove usage of implicit typing.Optional (#1663). Thanks
    @nadega for the PR.
- Release 3.8.0
  * Add fields.IP, fields.IPv4 and fields.IPv6 (#1485). Thanks
    @mgetka for the PR.
  * Fix typing in AwareDateTime (#1658). Thanks @adithyabsk for
    reporting.
- Use the python3 sphinx_build do build the docs
  gh#openSUSE/python-rpm-macros#109</changelog>
  <changelog author="simmphonie@opensuse.org" date="1653825600">- Update to 3.14.1 (2021-11-13)
  * Fix publishing type hints per PEP-561 (#1905). Thanks @bwindsor for the catch and patch.
- Release 3.14.0 (2021-10-17)
  * Fix fields.TimeDelta serialization precision (#1865). Thanks @yarsanich for reporting.
  * Fix type-hints for `data` arg in `Schema.validate` to accept list of
    dictionaries (#1790, #1868). Thanks @yourun-proger for PR.
  * Improve warning when passing metadata as keyword arguments (#1882).
    Thanks @traherom for the PR.
  * Don’t build universal wheels. We don’t support Python 2 anymore.
    (#1860) Thanks @YKdvd for reporting.
  * Make the build reproducible (#1862).
  * Drop support for Python 3.5 (#1863).
  * Test against Python 3.10 (#1888).
- Release 3.13.0 (2021-07-21)
  * Replace missing/default field parameters with load_default/dump_default (#1742).
    Thanks @sirosen for the PR.
  * The use of missing/default field parameters is deprecated and will be removed
  * in marshmallow 4. load_default/dump_default should be used instead.
- Release 3.12.2 (2021-07-06)
  * Don’t expose Fields as Schema attributes. This reverts a change
    introduced in 3.12.0 that causes issues when field names conflict
    with Schema attributes or methods. Fieldss are still accessible on a
    Schema instance through the fields attribute. (#1843)
- Release 3.12.1 (2021-05-10)
  * Fix bug that raised an AttributeError when instantiating a Schema with a
    field named parent (#1808). Thanks @flying-sheep for reporting and helping with the fix.
- Release 3.12.0 (2021-05-09)
  * Add validate.And (#1768). Thanks @rugleb for the suggestion.
  * Add type annotations to marshmallow.decorators (#1788, #1789). Thanks @michaeldimchuk for the PR.
  * Let Fields be accessed by name as Schema attributes (#1631).
  * Improve types in marshmallow.validate (#1786).
  * Make marshmallow.validate.Validator an abstract base class (#1786).
  * Remove unnecessary list cast (#1785).</changelog>
  <changelog author="yarunachalam@suse.com" date="1664452800">- Update to 3.17.1 (2022-08-22)
  Bug fixes:
  Add return type to fields.Email.__init__ (#2018). Thanks @kkirsche for the PR.
  Add missing type hint to IPInterface __init__ (#2036).
- Update to 3.17.0 (2022-06-26)
  Features:
  Support serialization as float in TimeDelta field (#1998). Thanks @marcosatti for the PR.
  Add messages_dict property to ValidationError to facilitate type checking (#1976). Thanks @sirosen for the PR.
- Update to 3.16.0 (2022-05-29)
  Features:
  Raise ValueError if an invalid value is passed to the unknown argument (#1721, #1732). Thanks @sirosen for the PR.
  Other changes:
  Set lower bound for packaging requirement (#1957). Thanks @MatthewNicolTR for reporting and thanks @sirosen for the PR.
  Improve warning messages by passing stacklevel (#1986). Thanks @tirkarthi for the PR.
- Update to 3.15.0 (2022-03-12)
  Features:
  Allow passing a dict to fields.Nested (#1935). Thanks @sirosen for the PR.
  Other changes:
  distutils deprecation warning in Python 3.10 (#1903). Thanks @kkirsche for the PR.
  Add py310 to black target-version (#1921).
  Drop support for Python 3.6 (#1923).</changelog>
  <changelog author="yarunachalam@suse.com" date="1666958400">- Update to 3.18.0 (2022-09-15)¶
  Features:
  Add Enum field (#2017) and (#2044).
  Bug fixes:
  Fix typing in Field._serialize signature (#2046).</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 3.19.0
  * Add timestamp and timestamp_ms formats to fields.DateTime (#612). Thanks @vgavro for    the suggestion and thanks @vanHoi for the PR.</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- We want "modern" Sphinx on SLE-15, not the 3.6-based one.</changelog>
  <changelog author="dmueller@suse.com" date="1678968000">- rename docs subpackage to the more common doc name</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package on SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1702209600">- update to 3.20.1:
  * Fix call to ``get_declared_fields``: pass ``dict_cls`` again
  * Add ``absolute`` parameter to ``URL`` validator and ``Url``
  * Use Abstract Base Classes to define ``FieldABC`` and
    ``SchemaABC``
  * Use `OrderedSet` as default `set_class`. Schemas are now
    ordered by default.
  * Handle ``OSError`` and ``OverflowError`` in
    ``utils.from_timestamp`` (:pr:`2102`).
  * Fix the default inheritance of nested partial schemas
  * Officially support Python 3.11 (:pr:`2067`).
  * Drop support for Python 3.7 (:pr:`2135`).</changelog>
  <changelog author="dmueller@suse.com" date="1705406400">- update to 3.20.2:
  * Bug fixes: - Fix Nested field type hint for lambda Schema
    types (:pr:`2164`).
  * Other changes: - Officially support Python 3.12 (:pr:`2188`).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711454400">- Switch build system from setuptools to pyproject.toml
  + Add python-pip and python-wheel to BuildRequires
  + Replace %python_build with %pyproject_wheel
  + Replace %python_install with %pyproject_install
- Limit Python files matched in %files section</changelog>
</package>
<package pkgid="1f4d3a74c044afb820ac77aaf0083c07eaef553c63c46433e4c4abd74bc62bff" name="python-multidict" arch="src">
  <version epoch="0" ver="6.0.4" rel="150400.7.7.4"/>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 3.3.0:
  * Introduce abstract base classes (#102)
  * Publish OSX binary wheels (#153)</changelog>
  <changelog author="arun@gmx.de" date="1509710400">- specfile:
  * don't package .c files
- update to version 3.3.2:
  * Fix tarball (again)
- changes from version 3.3.1:
  * Include .c files in tarball (#181)</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  * update copyright year
  * CHANGES.rst -&gt; docs/changes.rst
- update to version 4.0.0:
  * Accept multiple keys in MultiDict.update() and
    CIMultiDict.update() (PR #199)</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 4.1.0:
  * Fix key casing in Pure Python implementation of CIMultiDict (PR
    [#202])</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.2.0:
  * Publish py.typed flag for type hinting analyzers (mypy etc).</changelog>
  <changelog author="tchvatal@suse.com" date="1523966401">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Update to 4.3.1:
  * No obvious changelog</changelog>
  <changelog author="hpj@urpla.net" date="1535976000">- don't depend on a certain python devel package, avoids:
    nothing provides python2-devel &gt;= 3.4.1
  such a version will never exist!</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes macro expansion</changelog>
  <changelog author="mcalabkova@suse.com" date="1559131200">- update to 4.5.2
  * Multidict views ported from Cython to C extension
  4.4.*
  * Restore Python 3.4 support
  * Rewrite C implementation to use C pair list.
  * Fix update order when both arg and kwargs are used.</changelog>
  <changelog author="tchvatal@suse.com" date="1583755200">- Update to 4.7.5:
  * various fixes for python 3.8 support</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix fdupes call</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- update to 4.7.6:
  * Fixed an issue with some versions of the ``wheel`` dist
    failing because of being unable to detect the license file.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update to v5.0.2
  * No runtime changes</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 5.1.0:
  - Support ``GenericAliases`` (``MultiDict[str]``) for Python 3.9+
  `#553 &lt;https://github.com/aio-libs/multidict/issues/553&gt;`_</changelog>
  <changelog author="adrian@suse.de" date="1645704000">- update to 6.0.2:
  - Use ``METH_FASTCALL`` where it makes sense.
    ``MultiDict.add()`` is 2.2 times faster now, ``CIMultiDict.add()`` is 1.5 times faster.
    The same boost is applied to ``get*()``, ``setdefault()``, and ``pop*()`` methods. (:issue:`681`)
  - Fixed type annotations for keys of multidict mapping classes. (:issue:`644`)
  - Support Multidict[int] for pure-python version.
    ``__class_getitem__`` is already provided by C Extension, making it work with the pure-extension too. (:issue:`678`)
  - Dropped Python 3.6 support (:issue:`680`)</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to 6.0.3:
  * Features
    Declared the official support for Python 3.11 — by @mlegner. (#872)</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.4:
  * Fixed a type annotations regression introduced in v6.0.2 under Python
    versions &lt;3.10. It was caused by importing certain types only available
    in newer versions. (:issue:`798`)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="491ef85083da97e9a0a4af6503c455920dc515ad704980970a65a8dfb4e2eb06" name="python-oauthlib" arch="src">
  <version epoch="0" ver="3.2.2" rel="150400.12.7.4"/>
  <changelog author="arun@gmx.de" date="1506340800">- update to version 2.0.4:
  * Fixed typo that caused OAuthlib to crash because of the fix in
    "Address missing OIDC errors and fix a typo in the
    AccountSelectionRequired exception".
- changes from version 2.0.3:
  * Address missing OIDC errors and fix a typo in the
    AccountSelectionRequired exception.
  * Update proxy keys on CaseInsensitiveDict.update().
  * Redirect errors according to OIDC's response_mode.
  * Added universal wheel support.
  * Added log statements to except clauses.
  * According to RC7009 Section 2.1, a client should include
    authentication credentials when revoking its tokens. As discussed
    in #339, this is not make sense for public clients. However, in
    that case, the public client should still be checked that is
    infact a public client (authenticate_client_id).
  * Improved prompt parameter validation.
  * Added two error codes from RFC 6750.
  * Hybrid response types are now be fragment-encoded.
  * Added Python 3.6 to Travis CI testing and trove classifiers.
  * Fixed BytesWarning issued when using a string placeholder for
    bytes object.
  * Documented PyJWT dependency and improved logging and exception
    messages.
  * Documentation improvements and fixes.</changelog>
  <changelog author="arun@gmx.de" date="1508500800">- update to version 2.0.5:
  * Fix OAuth2Error.response_mode for #463.
  * Documentation improvement.</changelog>
  <changelog author="arun@gmx.de" date="1508587200">- update to version 2.0.6:
  * 2.0.5 contains breaking changes.</changelog>
  <changelog author="arun@gmx.de" date="1521892800">- specfile:
  * update copyright year
  * updated url
- update to version 2.0.7:
  * Moved oauthlib into new organization on GitHub.
  * Include license file in the generated wheel package. (#494)
  * When deploying a release to PyPI, include the wheel
    distribution. (#496)
  * Check access token in self.token dict. (#500)
  * Added bottle-oauthlib to docs. (#509)
  * Update repository location in Travis. (#514)
  * Updated docs for organization change. (#515)
  * Replace G+ with Gitter. (#517)
  * Update requirements. (#518)
  * Add shields for Python versions, license and RTD. (#520)
  * Fix ReadTheDocs build (#521).
  * Fixed "make" command to test upstream with local oauthlib. (#522)
  * Replace IRC notification with Gitter Hook. (#523)
  * Added Github Releases deploy provider. (#523)</changelog>
  <changelog author="arun@gmx.de" date="1522065600">- specfile:
  * ran spec-cleaner</changelog>
  <changelog author="arun@gmx.de" date="1527076800">- specfile:
  * fix fdupes call for single-spec
- update to version 2.1.0:
  * Fixed some copy and paste typos (#535)
  * Use secrets module in Python 3.6 and later (#533)
  * Add request argument to confirm_redirect_uri (#504)
  * Avoid populating spurious token credentials (#542)
  * Make populate attributes API public (#546)</changelog>
  <changelog author="mcepl@suse.com" date="1534161600">Remove dependency on unittest2
    Add remove_unittest2.patch to facilitate that</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Update to version 3.0.1
  * Fixed regression introduced in 3.0.0
    + Fixed Revocation &amp; Introspection Endpoints when using Client
    Authentication with HTTP Basic Auth.
- from 3.0.0
  * General fixes:
    + Add support of python3.7
    + $ and ' are allowed to be unencoded in query strings
    + Request attributes are no longer overriden by HTTP Headers
    + Removed unnecessary code for handling python2.6
    + Several minors updates to setup.py and tox
    + Set pytest as the default unittest framework
  * OAuth2.0 Provider - outstanding Features
    + OpenID Connect Core support
    + RFC7662 Introspect support
    + RFC8414 OAuth2.0 Authorization Server Metadata support
    + RFC7636 PKCE support
  * OAuth2.0 Provider - API/Breaking Changes
    + Add "request" to confirm_redirect_uri
    + confirm_redirect_uri/get_default_redirect_uri has a bit changed
    + invalid_client is now a FatalError
    + Changed errors status code from 401 to 400:
  - invalid_grant:
  - invalid_scope:
  - access_denied/unauthorized_client/consent_required/login_required
  - 401 must have WWW-Authenticate HTTP Header set.
  * OAuth2.0 Provider - Bugfixes
    + empty scopes no longer raise exceptions for implicit and authorization_code
  * OAuth2.0 Client - Bugfixes / Changes:
    + expires_in in Implicit flow is now an integer
    + expires is no longer overriding expires_in
    + parse_request_uri_response is now required
    + Unknown error=xxx raised by OAuth2 providers was not understood
    + OAuth2's `prepare_token_request` supports sending an empty string for `client_id`
    + OAuth2's `WebApplicationClient.prepare_request_body` was refactored to better
    support sending or omitting the `client_id` via a new `include_client_id` kwarg.
    By default this is included. The method will also emit a DeprecationWarning if
    a `client_id` parameter is submitted; the already configured `self.client_id`
    is the preferred option.
  * OAuth1.0 Client:
    + Support for HMAC-SHA256
- Removed remove_unittest2.patch made redundant by v3.0.1
- Set minumum version of python-PyJWT &gt;= 1.0.0</changelog>
  <changelog author="arun@gmx.de" date="1563710400">- specfile:
  * be more specific in %files section
- update to version 3.0.2:
  * #650: Fixed space encoding in base string URI used in the
    signature base string.
  * #652: Fixed OIDC /token response which wrongly returned
    "&amp;state=None"
  * #654: Doc: The value state must not be stored by the AS, only
    returned in /authorize response.
  * #656: Fixed OIDC "nonce" checks: raise errors when it's mandatory</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 3.1.0:
  * OAuth2.0 Provider - Features * #660: OIDC add support of nonce, c_hash, at_hash fields
  * #677: OIDC add UserInfo endpoint - New RequestValidator.get_userinfo_claims method
  * #666: Disabling query parameters for POST requests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588161600">- Add patch to switch from external mock to unittest.mock
  + o_switch_to_unitest_mock.patch</changelog>
  <changelog author="hpj@urpla.net" date="1600948800">- Fix patch numbering</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.1.1:
  * #753: Fix acceptance of valid IPv6 addresses in URI validation
  * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently
    relies on the `scope` provided in the constructor if any, except if overridden temporarily
    in a method call. Note that in particular providing a non-None `scope` in
    `prepare_authorization_request` or `prepare_refresh_token` does not override anymore
    `self.scope` forever, it is just used temporarily.
  * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response,
    ServiceApplicationClient.prepare_request_body,
    and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in
    constructor.
  * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor
  * #711: client_credentials grant: fix log message
  * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token
  * #756: Different prompt values are now handled according to spec (e.g. prompt=none)
  * #759: OpenID Connect - fix Authorization: Basic parsing
  * #716: improved skeleton validator for public vs private client
  * #720: replace mock library with standard unittest.mock
  * #727: build isort integration
  * #734: python2 code removal
  * #735, #750: add python3.8 support
  * #749: bump minimum versions of pyjwt and cryptography
- drop o_switch_to_unitest_mock.patch (upstream)</changelog>
  <changelog author="arun@gmx.de" date="1643889600">- specfile:
  * update copyright year
- update to version 3.2.0:
  * OAuth2.0 Client: * #795: Add Device Authorization Flow for Web
    Application * #786: Add PKCE support for Client * #783: Fallback
    to none in case of wrong expires_at format.
  * OAuth2.0 Provider: * #790: Add support for CORS to metadata
    endpoint. * #791: Add support for CORS to token endpoint. * #787:
    Remove comma after Bearer in WWW-Authenticate
  * OAuth2.0 Provider - OIDC:
    + #755: Call save_token in Hybrid code flow
    + #751: OIDC add support of refreshing ID Tokens with
    refresh_id_token
    + #751: The RefreshTokenGrant modifiers now take the same
    arguments as the AuthorizationCodeGrant modifiers (token,
    token_handler, request).
  * General:
    + Added Python 3.9, 3.10, 3.11
    + Improve Travis &amp; Coverage</changelog>
  <changelog author="arun@gmx.de" date="1662984000">- specfile:
  * update requirements
- update to version 3.2.1:
  * OAuth2.0 Provider: * #803: Metadata endpoint support of non-HTTPS
  * CVE-2022-36087, bugzilla # 1203333
  * OAuth1.0: * #818: Allow IPv6 being parsed by signature
  * General: * Improved and fixed documentation warnings. * Cosmetic
    changes based on isort</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 3.2.2:
  * OAuth2.0 Provider: * CVE-2022-36087
- Also remove the conditional definition of python_module.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="4bd2ae426305a8f9fd12f1f5c2488101e75753fc14785bc537ae06d69ed670ea" name="python-opentelemetry-api" arch="src">
  <version epoch="0" ver="1.23.0" rel="150400.10.7.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1582372800">- Initial build
  + Version 0.4a0</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Update to 0.4a1:
  * various minor tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1585310400">- version update to 0.5b0
  * W3C Correlation Context Propagation
  * OpenTelemetry Collector Exporter Integration for both metrics and traces
  * Metrics SDK
  * Global configuration module</changelog>
  <changelog author="pgajdos@suse.com" date="1586952000">- version update to 0.6b0
  * Add support for lazy events and links (#474)
  * Metrics API no longer uses LabelSet (#527)
  * Adding is_remote flag to SpanContext, indicating when a span is remote (#516)
  * Allow digit as first char in vendor specific trace state key (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1611316800">- Version update to 0.17b0
  + Added
  - Add support for OTLP v0.6.0 (#1472)
  - Add protobuf via gRPC exporting support for Jaeger (#1471)
  - Add support for Python 3.9 (#1441)
  - Added the ability to disable instrumenting libraries specified by
    OTEL_PYTHON_DISABLED_INSTRUMENTATIONS env variable, when using
    opentelemetry-instrument command. (#1461)
  - Add `fields` to propagators (#1374)
  - Add local/remote samplers to parent based sampler (#1440)
  - Add support for OTEL_SPAN_{ATTRIBUTE_COUNT_LIMIT,EVENT_COUNT_LIMIT,LINK_COUNT_LIMIT}
    (#1377)
  - Return `None` for `DictGetter` if key not found (#1449)
  - Added support for Jaeger propagator (#1219)
  - Remove dependency on SDK from `opentelemetry-instrumentation` package. The
    `opentelemetry-sdk` package now registers an entrypoint `opentelemetry_configurator`
    to allow `opentelemetry-instrument` to load the configuration for the SDK (#1420)
  - `opentelemetry-exporter-zipkin` Add support for array attributes in Span and
    Resource exports (#1285)
  - Added `__repr__` for `DefaultSpan`, added `trace_flags` to `__repr__` of
    `SpanContext` (#1485)
  - `opentelemetry-sdk` Add support for OTEL_TRACE_SAMPLER and OTEL_TRACE_SAMPLER_ARG
    env variables (#1496)
  - Adding `opentelemetry-distro` package to add default configuration for
    span exporter to OTLP (#1482)
  + Changed
  - `opentelemetry-exporter-zipkin` Updated zipkin exporter status code and error tag
    (#1486)
  - Recreate span on every run of a `start_as_current_span`-decorated function (#1451)
  - `opentelemetry-exporter-otlp` Headers are now passed in as tuple as metadata, instead of a
    string, which was incorrect. (#1507)
  - `opentelemetry-exporter-jaeger` Updated Jaeger exporter status code tag (#1488)
  - `opentelemetry-api` `opentelemety-sdk` Moved `idsgenerator` into sdk (#1514)
  - `opentelemetry-sdk` The B3Format propagator has been moved into its own package:
    `opentelemetry-propagator-b3` (#1513)
  - Update default port for OTLP exporter from 55680 to 4317 (#1516)
  - `opentelemetry-exporter-zipkin` Update boolean attribute value transformation (#1509)
  - Move opentelemetry-opentracing-shim out of instrumentation folder (#1533)
  - `opentelemetry-sdk` The JaegerPropagator has been moved into its own package:
    `opentelemetry-propagator-jaeger` (#1525)
  - `opentelemetry-exporter-jaeger`, `opentelemetry-exporter-zipkin` Update
    InstrumentationInfo tag keys for Jaeger and Zipkin exporters (#1535)
  - `opentelemetry-sdk` Remove rate property setter from TraceIdRatioBasedSampler (#1536)
  - Fix TraceState to adhere to specs (#1502)
  + Removed
  - `opentelemetry-api` Remove ThreadLocalRuntimeContext since python3.4 is not supported.
- from version 0.16b1
  + Added
  - Add meter reference to observers (#1425)
- from version 0.16b0
  + Added
  - Add optional parameter to `record_exception` method (#1314)
  - Add pickle support to SpanContext class (#1380)
  - Add instrumentation library name and version to OTLP exported metrics (#1418)
  - Add Gzip compression for exporter (#1141)
  - Support for v2 api protobuf format (#1318)
  - Add IDs Generator as Configurable Property of Auto Instrumentation (#1404)
  - Added support for `OTEL_EXPORTER` to the `opentelemetry-instrument` command
    (#1036)
  + Changed
  - Change temporality for Counter and UpDownCounter (#1384)
  - OTLP exporter: Handle error case when no credentials supplied (#1366)
  - Update protobuf versions (#1356)
  - Add missing references to instrumented packages (#1416)
  - Instrumentation Package depends on the OTel SDK (#1405)
  - Allow samplers to modify tracestate (#1319)
  - Update exception handling optional parameters, add escaped attribute to record_exception
    (#1365)
  - Rename `MetricRecord` to `ExportRecord` (#1367)
  - Rename `Record` to `Accumulation` (#1373)
  - Rename `Meter` to `Accumulator (#1372)
  - Fix `ParentBased` sampler for implicit parent spans. Fix also `trace_state`
    erasure for dropped spans or spans sampled by the `TraceIdRatioBased` sampler.
    (#1394)
- See upstream CHANGELOG.md for the changes from 0.7b1 to 0.15b0
  + https://raw.githubusercontent.com/open-telemetry/opentelemetry-python/master/CHANGELOG.md
- Drop tests.tar.bz2 tarball as tests are included in the upstream source now</changelog>
  <changelog author="code@bnavigator.de" date="1611316801">- aiocontextvars is only needed for older Python 3.6. Python 3.7
  and beyond provide everything in stdlib contextvars. See
  upstreams' setup.cfg.  Use rpm boolean dependencies to pull in
  aiocontextvars only for python36 if available (TW) or python3 if
  python3-base &lt; 3.7 (Leap)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620388800">- Version update to 1.1.0
  + Added
  - Added py.typed file to every package. This should resolve a bunch of mypy
    errors for users. (#1720)
  - Add auto generated trace and resource attributes semantic conventions (#1759)
  - Added SpanKind to should_sample parameters, suggest using parent span
    context's tracestate instead of manually passed in tracestate in
    should_sample (#1764)
  - Added experimental HTTP back propagators. (#1762)
  - Adjust B3Format propagator to be spec compliant by not modifying context
    when propagation headers are not present/invalid/empty (#1728)
  - Silence unnecessary warning when creating a new Status object without description. (#1721)
  - Update bootstrap cmd to use exact version when installing instrumentation packages. (#1722)
  - Fix B3 propagator to never return None. (#1750)
  - Added ProxyTracerProvider and ProxyTracer implementations to allow fetching provider
    and tracer instances before a global provider is set up. (#1726)
  - Added __contains__ to opentelementry.trace.span.TraceState. (#1773)
    opentelemetry-opentracing-shim Fix an issue in the shim where a Span was being wrapped
    in a NonRecordingSpan when it wasn't necessary. (#1776)
  - OTLP Exporter now uses the scheme in the endpoint to determine whether to establish
    a secure connection or not. (#1771)
- from version 1.10a0
  + This release adds the experimental metrics API/SDK and will include the following packages:
  - opentelemetry-exporter-prometheus
  - opentelemetry-api
  - opentelemetry-sdk
  - opentelemetry-exporter-otlp-proto-grpc
  - opentelemetry-exporter-otlp
- from version 1.0.0
  + NOTE: As part of this release, all old versions have been removed for packages
    prefixed with opentelemetry-ext-
  + Added
  - Document how to work with fork process web server models(Gunicorn, uWSGI etc...)
    (#1609)
  - Add max_attr_value_length support to Jaeger exporter (#1633)
  - Moved use_span from Tracer to opentelemetry.trace.use_span. (#1668)
  - opentelemetry.trace.use_span() will now overwrite previously set status on span
    in case an exception is raised inside the context manager and set_status_on_exception
    is set to True. (#1668)
  - Add udp_split_oversized_batches support to jaeger exporter (#1500)
  + Changed
  - remove service_name from constructor of jaeger and opencensus exporters and
    use of env variable OTEL_PYTHON_SERVICE_NAME ([#1669])(#1669)
  - Rename IdsGenerator to IdGenerator (#1651)
  - Make TracerProvider's resource attribute private (#1652)
  - Rename Resource's create_empty to get_empty (#1653)
  - Renamed BatchExportSpanProcessor to BatchSpanProcessor and SimpleExportSpanProcessor
    to SimpleSpanProcessor (#1656)
  - Rename DefaultSpan to NonRecordingSpan (#1661)
  - Fixed distro configuration with OTEL_TRACES_EXPORTER env var set to otlp (#1657)
  - Moving Getter, Setter and TextMapPropagator out of opentelemetry.trace.propagation
    and into opentelemetry.propagators (#1662)
  - Rename BaggagePropagator to W3CBaggagePropagator (#1663)
  - Rename JaegerSpanExporter to JaegerExporter and rename ZipkinSpanExporter to
    ZipkinExporter (#1664)
  - Expose StatusCode from the opentelemetry.trace module (#1681)
  - Status now only sets description when status_code is set to StatusCode.ERROR (#1673)
  - Update OTLP exporter to use OTLP proto 0.7.0 (#1674)
  - Remove time_ns from API and add a warning for older versions of Python (#1602)
  - Hide implementation classes/variables in api/sdk (#1684)
  - Cleanup OTLP exporter compression options, add tests (#1671)
  - Initial documentation for environment variables (#1680)
  - Change Zipkin exporter to obtain service.name from span (#1696)
  - Split up opentelemetry-exporter-jaeger package into opentelemetry-exporter-jaeger-proto-grpc
    and opentelemetry-exporter-jaeger-thrift packages to reduce dependencies for each one. (#1694)
  - Added opentelemetry-exporter-otlp-proto-grpc and changed opentelemetry-exporter-otlp to
    install it as a dependency. This will allow for the next package/protocol to also be in
    its own package. (#1695)
  - Change Jaeger exporters to obtain service.name from span (#1703)
  - Fixed an unset OTEL_TRACES_EXPORTER resulting in an error (#1707)
  - Split Zipkin exporter into opentelemetry-exporter-zipkin-json and opentelemetry-exporter-zipkin-
    proto-http packages to reduce dependencies. The opentelemetry-exporter-zipkin installs both. (#1699)
  - Make setters and getters optional (#1690)
  + Removed
  - Removed unused get_hexadecimal_trace_id and get_hexadecimal_span_id methods. (#1675)
  - Remove OTEL_EXPORTER_*_ INSECURE env var (#1682)
  - Removing support for Python 3.5 (#1706)
- from version 0.19b0
  + Changed
  - remove service_name from constructor of jaeger and opencensus exporters and
    use of env variable OTEL_PYTHON_SERVICE_NAME ([#1669])(#1669)
  - Rename IdsGenerator to IdGenerator (#1651)
  + Removed
  - Removing support for Python 3.5 (#1706)
- from version 0.18b0
  + Release only affects Opentelemetry components listed below:
  - opentelemetry-distro
  - opentelemetry-exporter-opencensus
  - opentelemetry-instrumentation
  - opentelemetry-opentracing-shim
  + Added
  - Add urllib to opentelemetry-bootstrap target list ([#1584])(#1584)
- from version 1.0.0rc1
  + Release only affects core Opentelemetry components listed below:
  - opentelemetry-api
  - opentelemetry-sdk
  - opentelemetry-exporter-otlp
  - opentelemetry-exporter-jaeger
  - opentelemetry-exporter-zipkin
  - opentelemetry-proto
  - opentelemetry-propagator-b3
  - opentelemetry-propagator-jaeger
  + Changed
  - Tracer and Meter provider environment variables are now consistent with the rest (#1571])
  - Rename TRACE_ to TRACES_ for environment variables (#1595])
  - Read-only Span attributes have been moved to ReadableSpan class (#1560)
  + Added
  - Added end_on_exit argument to start_as_current_span (#1519])
  - Add Span.set_attributes method to set multiple values with one call (#1520)
  - Make sure Resources follow semantic conventions (#1480)
  - Allow missing carrier headers to continue without raising AttributeError (#1545)
  + Removed
  - Remove Configuration (#1523)
  - Remove Metrics as part of stable, marked as experimental (#1568)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1636027200">- Version update to 1.5.0
  - Add pre and post instrumentation entry points (#1983)
  - Fix documentation on well known exporters and variable OTEL_TRACES_EXPORTER
    which were misnamed (#2023)
  - `opentelemetry-sdk` `get_aggregated_resource()` returns default resource and
    service name whenever called (#2013)
  - `opentelemetry-distro` &amp; `opentelemetry-sdk` Moved Auto Instrumentation Configurator
    code to SDK to let distros use its default implementation (#1937)
  - Add Trace ID validation to meet TraceID spec (#1992)
  - Fixed Python 3.10 incompatibility in `opentelemetry-opentracing-shim` tests (#2018)
  - `opentelemetry-sdk` added support for `OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT` (#2044)
  - `opentelemetry-sdk` Fixed bugs (#2041, #2042 &amp; #2045) in Span Limits (#2044)
  - `opentelemetry-sdk` Add support for `OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT` env var (#2056)
  - `opentelemetry-sdk` Treat limit even vars set to empty values as unset/unlimited. (#2054)
  - `opentelemetry-api` Attribute keys must be non-empty strings. (#2057)
- from version 1.4.0
  + Added
  - Moved `opentelemetry-instrumentation` to core repository. (#1959)
  - Add support for OTLP Exporter Protobuf over HTTP (#1868)
  - Dropped attributes/events/links count available exposed on ReadableSpans. (#1893)
  - Added dropped count to otlp, jaeger and zipkin exporters. (#1893)
  - Give OTLPHandler the ability to process attributes (#1952)
  - Add global LogEmitterProvider and convenience function get_log_emitter (#1901)
  - Add OTLPHandler for standard library logging module (#1903)
  + Changed
  - Updated `opentelemetry-opencensus-exporter` to use `service_name` of spans
    instead of resource (#1897)
  - Added descriptions to the env variables mentioned in the opentelemetry-specification
    (#1898)
  - Ignore calls to `Span.set_status` with `StatusCode.UNSET` and also if previous
    status already had `StatusCode.OK`. (#1902)
  - Attributes for `Link` and `Resource` are immutable as they are for `Event`, which
    means any attempt to modify attributes directly will result in a `TypeError` exception.
    (#1909)
  - Added `BoundedAttributes` to the API to make it available for `Link` which is defined
    in the API. Marked `BoundedDict` in the SDK as deprecated as a result. (#1915)
  - Fix OTLP SpanExporter to distinguish spans based off Resource and InstrumentationInfo
    (#1927)
  - Updating dependency for opentelemetry api/sdk packages to support major version
    instead of pinning to specific versions. (#1933)
  - `opentelemetry-semantic-conventions` Generate semconv constants update for OTel
    Spec 1.5.0 (#1946)
  + Fixed
  - Updated `opentelementry-opentracing-shim` `ScopeShim` to report exceptions in
    opentelemetry specification format, rather than opentracing spec format. (#1878)
- from version 1.3.0
  + Added
  - Allow span limits to be set programatically via TracerProvider. (#1877)
  - Added support for CreateKey functionality. (#1853)
  + Changed
  - Updated get_tracer to return an empty string when passed an invalid name (#1854)
  - Changed AttributeValue sequences to warn mypy users on adding None values to array
    (#1855)
  - Fixed exporter OTLP header parsing to match baggage header formatting. (#1869)
  - Added optional `schema_url` field to `Resource` class (#1871)
  - Update protos to latest version release 0.9.0 (#1873)
- from version 1.2.0
  + Added
  - Added example for running Django with auto instrumentation. (#1803)
  - Added `B3SingleFormat` and `B3MultiFormat` propagators to the
    `opentelemetry-propagator-b3` package. (#1823)
  - Added support for OTEL_SERVICE_NAME. (#1829)
  - Lazily read/configure limits and allow limits to be unset. (#1839)
  - Added support for OTEL_EXPORTER_JAEGER_TIMEOUT (#1863)
  + Changed
  - Fixed OTLP gRPC exporter silently failing if scheme is not specified
    in endpoint. (#1806)
  - Rename CompositeHTTPPropagator to CompositePropagator as per specification.
    (#1807)
  - Propagators use the root context as default for `extract` and do not modify
    the context if extracting from carrier does not work. (#1811)
  - Fixed `b3` propagator entrypoint to point to `B3SingleFormat` propagator.
    (#1823)
  - Added `b3multi` propagator entrypoint to point to `B3MultiFormat` propagator.
    (#1823)
  - Improve warning when failing to decode byte attribute (#1810)
  - Fixed inconsistency in parent_id formatting from the ConsoleSpanExporter
    (#1833)
  - Include span parent in Jaeger gRPC export as `CHILD_OF` reference (#1809)
  - Fixed sequence values in OTLP exporter not translating (#1818)
  - Update transient errors retry timeout and retryable status codes (#1842)
  - Apply validation of attributes to `Resource`, move attribute related logic
    to separate package. (#1834)
  - Fix start span behavior when excess links and attributes are included (#1856)
  +  Removed
  - Moved `opentelemetry-instrumentation` to contrib repository. (#1797)</changelog>
  <changelog author="code@bnavigator.de" date="1642334400">- Remove obsolete but unresolvable python36 requirement</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683806400">- Ignore some tests because there's no opentelemetry-test-util module
  gh#open-telemetry/opentelemetry-python#2263
- Update to 1.17.0:
  * Implement LowMemory temporality (#3223)
  * PeriodicExportingMetricReader will continue if collection times out (#3100)
  * Fix formatting of ConsoleMetricExporter. (#3197)
  * Fix use of built-in samplers in SDK configuration (#3176)
  * Implement shutdown procedure forOTLP grpc exporters (#3138)
  * Add exponential histogram (#2964)
  * Add OpenCensus trace bridge/shim (#3210)
  * A lot more changes in previous releases can be found at
  https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md#version-1170038b0-2023-03-22</changelog>
  <changelog author="dmueller@suse.com" date="1702209600">- update to 1.21.0:
  * Fix `SumAggregation` ￼  (#3390)
  * Fix handling of empty metric collection cycles (#3335)
  * Fix error when no LoggerProvider configured for
    LoggingHandler (#3423)
  * Make `opentelemetry_metrics_exporter` entrypoint support pull
    exporters (#3428)
  * Allow instrument names to have '/' and up to 255 characters
    (#3442)
  * Do not load Resource on sdk import (#3447)
  * Update semantic conventions to version 1.21.0 (#3251)
  * Add missing schema_url in global api for logging and metrics
    (#3251)
  * Prometheus exporter support for auto instrumentation  (#3413)
  * Modify Prometheus exporter to translate non-monotonic Sums
    into Gauges (#3306)
  * Update the body type in the log ($3343)
  * Add max_scale option to Exponential Bucket Histogram
    Aggregation  (#3323)
  * Use BoundedAttributes instead of raw dict to extract
    attributes from LogRecord (#3310)
  * Support dropped_attributes_count in LogRecord and exporters
    (#3351)
  * Add unit to view instrument selection criteria (#3341)
  * Upgrade opentelemetry-proto to 0.20 and regen #3355)
  * Include endpoint in Grpc transient error warning #3362)
  * Fixed bug where logging export is tracked as trace #3375)
  * Select histogram aggregation with an environment variable
  * Move Protobuf encoding to its own package (#3169)
  * Add experimental feature to detect resource detectors in auto
    instrumentation (#3181)
  * Fix exporting of ExponentialBucketHistogramAggregation from
    opentelemetry.sdk.metrics.view (#3240)
  * Fix headers types mismatch for OTLP Exporters (#3226)
  * Fix suppress instrumentation for log batch processor (#3223)
  * Add speced out environment variables and arguments for
    BatchLogRecordProcessor (#3237)</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.22.0:
  * Prometheus exporter sanitize info metric (#3572)
  * Remove Jaeger exporters (#3554)
  * Log stacktrace on `UNKNOWN` status OTLP export error  (#3536)
  * Fix OTLPExporterMixin shutdown timeout period (#3524)
  * Handle `taskName` `logrecord` attribute (#3557)</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1711195200">- update to 1.23.0:
  * Use Attribute rather than boundattribute in logrecord (#3567)
  * Fix flush error when no LoggerProvider configured for LoggingHandler (#3608)
  * Fix OTLPMetricExporter ignores preferred_aggregation property (#3603)
  * Logs: set observed_timestamp field (#3565)
  * Add missing Resource SchemaURL in OTLP exporters (#3652)
  * Fix loglevel warning text (#3566)
  * Prometheus Exporter string representation for target_info labels (#3659)
  * Logs: ObservedTimestamp field is missing in console exporter output (#3564)
  * Fix explicit bucket histogram aggregation (#3429)
  * Add code.lineno, code.function and code.filepath to all logs (#3645)
  * Add Synchronous Gauge instrument (#3462)
  * Drop support for 3.7 (#3668)
  * Include key in attribute sequence warning (#3639)
  * Upgrade markupsafe, Flask and related dependencies to dev and test
    environments (#3609)
  * Handle HTTP 2XX responses as successful in OTLP exporters (#3623)
  * Improve Resource Detector timeout messaging (#3645)
  * Add Proxy classes for logging (#3575)
  * Remove dependency on 'backoff' library (#3679)</changelog>
</package>
<package pkgid="575b5e099e714e2a67f0cb1816196b5773f097378acbec0a27e56c3c44f378e3" name="python-paramiko" arch="src">
  <version epoch="0" ver="3.4.0" rel="150400.13.10.4"/>
  <changelog author="mimi.vx@gmail.com" date="1550145600">- drop python-pytest_relaxed dependency
- add patches:
  1311.patch - fix warnings
  1379.patch - fix support for gssapi
  relaxed.patch - remove unnecessary pytest_relaxed dep
- remove patch:
  disable-gssapi.patch - supersseded</changelog>
  <changelog author="hpj@urpla.net" date="1550145601">- add empty line after %autopatch: build fails up to 42.3 otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1552478400">- Run tests verbosely
- Drop cert_support.tar.gz as it is currently properly in the release</changelog>
  <changelog author="mimi.vx@gmail.com" date="1560254400">- update to 2.5.0
- dropped 1379.patch
- refreshed patches:
    paramiko-test_extend_timeout.patch
    relaxed.patch
    1311.patch
  * Add support for encrypt-then-MAC (ETM) schemes (hmac-sha2-256-etm@openssh.com,
    hmac-sha2-512-etm@openssh.com) and two newer Diffie-Hellman group key exchange
    algorithms (group14, using SHA256; and group16, using SHA512).
  * Add support for Curve25519 key exchange.
  * Raise Cryptography dependency requirement to version 2.5
  * Add support for the modern (as of Python 3.3) import location of MutableMapping</changelog>
  <changelog author="mimi.vx@gmail.com" date="1561464000">- update to 2.6.0 (bsc#1200603)
- drop relaxed.patch and 1311.patch
  * add a new keyword argument to SSHClient.connect &lt;paramiko.client.SSHClient.connect&gt;
    and paramiko.transport.Transport -&gt; disabled_algorithms
  * Fix Ed25519 key handling so certain key comment lengths don't cause
    SSHException("Invalid key")
  * Add backwards-compatible support for the gssapi</changelog>
  <changelog author="mimi.vx@gmail.com" date="1576929600">- update to 2.7.1
- add configs.tar.gz with missing test data
  * full changelog at http://www.paramiko.org/changelog.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1599220800">- update to 2.7.2 (bsc#1166758, bsc#1166758, bsc#1205132)
- drop configs.tar.gz
  * Add missing test suite fixtures directory to MANIFEST.in
  * Remove leading whitespace from OpenSSH RSA test suite static key fixture,
  * Fix incorrect string formatting causing unhelpful error message annotation
    when using Kerberos/GSSAPI.
  * Fix incorrectly swapped order of p and q numbers when loading
    OpenSSH-format RSA private keys.</changelog>
  <changelog author="code@bnavigator.de" date="1602590400">- remove dependency on pytest-relaxed
  * paramiko-pr1655-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1655</changelog>
  <changelog author="steven.kowalik@suse.com" date="1607342400">- Set environment to utf-8 to allow tests to pass on Python 2. (bsc#1178341)</changelog>
  <changelog author="ecsos@opensuse.org" date="1634040000">- Update to 2.8.0
  - [Feature] #1846: Add a prefetch keyword argument to
    SFTPClient.get/SFTPClient.getfo so users who need to skip SFTP
    prefetching are able to conditionally turn it off.
  - [Bug] #1462: (via #1882) Newer server-side key exchange
    algorithms not intended to use SHA1 (diffie-hellman-group14-sha256,
    diffie-hellman-group16-sha512) were incorrectly using SHA1 after all,
    due to a bug causing them to ignore the hash_algo class attribute.
    This has been corrected.
  - [Support] #1722: Remove leading whitespace from OpenSSH RSA test
    suite static key fixture, to conform better to spec.
  - [Support] #1727: Add missing test suite fixtures directory to
    MANIFEST.in, reinstating the ability to run Paramiko’s tests from
    an sdist tarball.
  - [Support]: Update our CI to catch issues with sdist generation,
    installation and testing.
  - [Support]: Administrivia overhaul, including but not limited to:
  - Migrate CI to CircleCI
  - Primary dev branch is now main (renamed)
  - Many README edits for clarity, modernization etc; including
    a bunch more (and consistent) status badges &amp; unification with
    main project site index
  - PyPI page much more fleshed out (long_description is now filled
    in with the README; sidebar links expanded; etc)
  - flake8, pytest configs split out of setup.cfg into their own files
  - Invoke/invocations (used by maintainers/contributors) upgraded
    to modern versions
- Skip python2 to fix build errors for Leap.
- Rebase paramiko-pr1655-remove-pytest-relaxed.patch.</changelog>
  <changelog author="michael@stroeder.com" date="1647604800">- Update to 2.10.3 (bsc#1197279, CVE-2022-24302)
  Too many changes to be listed here:
  https://www.paramiko.org/changelog.html</changelog>
  <changelog author="pgajdos@suse.com" date="1649419200">- do not require python-mock for build</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 2.10.4:
  * Servers offering certificate variants of hostkey algorithms (eg
    ssh-rsa-cert-v01@openssh.com) could not have their host keys verified by
    Paramiko clients, as it only ever considered non-cert key types for that
    part of connection handshaking. This has been fixed.
  * gq PKey instances’ __eq__ did not have the usual safety guard in place to
    ensure they were being compared to another PKey object, causing occasional
    spurious BadHostKeyException (among other things). This has been fixed.
  * Update camelCase method calls against the threading module to be snake_case;
    this and related tweaks should fix some deprecation warnings under Python 3.10.</changelog>
  <changelog author="michael@stroeder.com" date="1653566400">- update to 2.11.0
  * [Feature] #1951: Add SSH config token expansion (eg %h, %p) when
    parsing ProxyJump directives.
  * [Support] #2004: (via #2011) Apply unittest skipIf to tests currently
    using SHA1 in their critical path, to avoid failures on systems starting
    to disable SHA1 outright in their crypto backends (eg RHEL 9).
  * [Support] #1838: (via #1870/#2028) Update camelCase method calls
    against the threading module to be snake_case; this and related tweaks
    should fix some deprecation warnings under Python 3.10.
  * [Support] #2038: (via #2039) Recent versions of Cryptography have
    deprecated Blowfish algorithm support; in lieu of an easy method for
    users to remove it from the list of algorithms Paramiko tries to import
    and use, we’ve decided to remove it from our “preferred algorithms” list.
    This will both discourage use of a weak algorithm, and avoid warnings.
- update to 2.10.5
  * [Bug] #2008: (via #2010) Windows-native SSH agent support as merged in
    2.10 could encounter Errno 22 OSError exceptions in some scenarios
    (eg server not cleanly closing a relevant named pipe).
    This has been worked around and should be less problematic.
  * [Bug] #2017: OpenSSH 7.7 and older has a bug preventing it from
    understanding how to perform SHA2 signature verification for RSA
    certificates (specifically certs - not keys), so when we added SHA2
    support it broke all clients using RSA certificates with these servers.
    This has been fixed in a manner similar to what OpenSSH’s own client
    does: a version check is performed and the algorithm used is downgraded
    if needed.
  * [Bug] #1933: Align signature verification algorithm with OpenSSH re:
    zero-padding signatures which don’t match their nominal size/length. This
    shouldn’t affect most users, but will help Paramiko-implemented SSH
    servers handle poorly behaved clients such as PuTTY.</changelog>
  <changelog author="code@bnavigator.de" date="1668945600">- Update to 2.12.0
  * [Feature] #2125: (also re: #2054) Add a transport_factory kwarg
    to SSHClient.connect for advanced users to gain more control
    over early Transport setup and manipulation. Thanks to Noah
    Pederson for the patch.
- Release 2.11.1
  * [Bug]: bug:1637 (via #1599) Raise SSHException explicitly when
    blank private key data is loaded, instead of the natural result
    of IndexError. This should help more bits of Paramiko or
    Paramiko-adjacent codebases to correctly handle this class of
    error. Credit: Nicholas Dietz.
  * [Bug] #1822: (via, and relating to, far too many other issues
    to mention here) Update SSHClient so it explicitly closes its
    wrapped socket object upon encountering socket errors at
    connection time. This should help somewhat with certain classes
    of memory leaks, resource warnings, and/or errors (though we
    hasten to remind everyone that Client and Transport have their
    own .close() methods for use in non-error situations!). Patch
    courtesy of @YoavCohen.
- Rename and refresh:
  - paramiko-pr1655-remove-pytest-relaxed.patch
  + paramiko-pr1665-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1665</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683892800">- Delete paramiko-pr1665-remove-pytest-relaxed.patch
- Add remove-icecream-dep.patch
- Update to 3.1.0:
  * [Feature] #2173: Accept single tabs as field separators (in
    addition to single spaces) in
    &lt;paramiko.hostkeys.HostKeyEntry.from_line&gt; for parity with
    OpenSSH’s KnownHosts parser. Patched by Alex Chavkin.
  * [Feature] #2013: (solving #2009, plus others) Add an explicit
    channel_timeout keyword argument to
    paramiko.client.SSHClient.connect, allowing users to configure the
    previously-hardcoded default value of 3600 seconds. Thanks to
    @VakarisZ and @ilija-lazoroski for the report and patch, with
    credit to Mike Salvatore for patch review.
  * [Support] #2178: Apply codespell to the codebase, which found a
    lot of very old minor spelling mistakes in docstrings. Also
    modernize many instances of *largs vs *args and **kwarg vs
  * *kwargs. Patch courtesy of Yaroslav Halchenko, with review from
    Brian Skinn.
- 3.0.0:
  * [Bug]: A handful of lower-level classes (notably
    paramiko.message.Message and paramiko.pkey.PKey) previously
    returned bytes objects from their implementation of __str__, even
    under Python 3; and there was never any __bytes__ method.
  * These issues have been fixed by renaming __str__ to __bytes__ and
    relying on Python’s default “stringification returns the output of
    __repr__” behavior re: any real attempts to str() such objects.
  * [Bug] #2165: Streamline some redundant (and costly) byte
    conversion calls in the packetizer and the core SFTP module. This
    should lead to some SFTP speedups at the very least. Thanks to
    Alex Gaynor for the patch.
  * [Bug] #2110: Remove some unnecessary __repr__ calls when handling
    bytes-vs-str conversions. This was apparently doing a lot of
    unintentional data processing, which adds up in some use cases –
    such as SFTP transfers, which may now be significantly faster.
    Kudos to Shuhua Zhong for catch &amp; patch.
  * [Support]: Drop support for Python versions less than 3.6,
    including Python 2. So long and thanks for all the fish!
  * [Support]: Remove the now irrelevant paramiko.py3compat module.
  * [Support]: paramiko.common.asbytes has been moved to
    paramiko.util.asbytes.
  * [Support]: PKey.__cmp__ has been removed. Ordering-oriented
    comparison of key files is unlikely to have ever made sense (the
    old implementation attempted to order by the hashes of the key
    material) and so we have not bothered setting up __lt__ and
    friends at this time. The class continues to have its original
    __eq__ untouched.
  * [Support]: The behavior of private key classes’ (ie anything
    inheriting from PKey) private key writing methods used to perform
    a manual, extra chmod call after writing. This hasn’t been
    strictly necessary since the mid 2.x release line (when key
    writing started giving the mode argument to os.open), and has now
    been removed entirely.
  * This should only be observable if you were mocking Paramiko’s
    system calls during your own testing, or similar.
  * [Support] #732: (also re: #630) SSHConfig used to straight-up
    delete the proxycommand key from config lookup results when the
    source config said ProxyCommand none. This has been altered to
    preserve the key and give it the Python value None, thus making
    the Python representation more in line with the source config
    file.
  * [Support]: paramiko.util.retry_on_signal (and any internal uses of
    same, and also any internal retries of EINTR on eg socket
    operations) has been removed. As of Python 3.5, per PEP 475, this
    functionality (and retrying EINTR generally) is now part of the
    standard library.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1695988800">- refresh remove-icecream-dep.patch
- update to 3.3.1
  detailed changelog: https://www.paramiko.org/changelog.html#</changelog>
  <changelog author="steven.kowalik@suse.com" date="1703073600">- Update to 3.4.0: (CVE-2023-48795, bsc#1218168)
  * Transport grew a new packetizer_class kwarg for overriding the
    packet-handler class used internally.
  * Address CVE 2023-48795 (aka the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    + The vulnerability only impacts encrypt-then-MAC digest algorithms in
    tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
    currently only implements hmac-sha2-(256|512)-etm in tandem with
    AES-CBC.
    + As the fix for the vulnerability requires both ends of the connection
    to cooperate, the below changes will only take effect when the remote
    end is OpenSSH &gt;= 9.6 (or equivalent, such as Paramiko in server mode,
    as of this patch version) and configured to use the new
    "strict kex" mode.
    + Paramiko will now raise an SSHException subclass (MessageOrderError)
    when protocol messages are received in unexpected order. This includes
    situations like receiving MSG_DEBUG or MSG_IGNORE during initial key
    exchange, which are no longer allowed during strict mode.
    + Key (re)negotiation -- i.e. MSG_NEWKEYS, whenever it is encountered --
    now resets packet sequence numbers. (This should be invisible to users
    during normal operation, only causing exceptions if the exploit is
    encountered, which will usually result in, again, MessageOrderError.)
    + Sequence number rollover will now raise SSHException if it occurs
    during initial key exchange (regardless of strict mode status).
  * Tweak ext-info-(c|s) detection during KEXINIT protocol phase; the
    original implementation made assumptions based on an OpenSSH
    implementation detail.
- Add patch use-64-bit-maxsize-everywhere.patch:
  * Use the 64-bit value of sys.maxsize.</changelog>
</package>
<package pkgid="3c4f593b7f69ae74b359750382000f46baf81dcc836446c0b9e72aa01727a2dd" name="python-paramiko-doc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="150400.13.10.4"/>
  <changelog author="mimi.vx@gmail.com" date="1550145600">- drop python-pytest_relaxed dependency
- add patches:
  1311.patch - fix warnings
  1379.patch - fix support for gssapi
  relaxed.patch - remove unnecessary pytest_relaxed dep
- remove patch:
  disable-gssapi.patch - supersseded</changelog>
  <changelog author="hpj@urpla.net" date="1550145601">- add empty line after %autopatch: build fails up to 42.3 otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1552478400">- Run tests verbosely
- Drop cert_support.tar.gz as it is currently properly in the release</changelog>
  <changelog author="mimi.vx@gmail.com" date="1560254400">- update to 2.5.0
- dropped 1379.patch
- refreshed patches:
    paramiko-test_extend_timeout.patch
    relaxed.patch
    1311.patch
  * Add support for encrypt-then-MAC (ETM) schemes (hmac-sha2-256-etm@openssh.com,
    hmac-sha2-512-etm@openssh.com) and two newer Diffie-Hellman group key exchange
    algorithms (group14, using SHA256; and group16, using SHA512).
  * Add support for Curve25519 key exchange.
  * Raise Cryptography dependency requirement to version 2.5
  * Add support for the modern (as of Python 3.3) import location of MutableMapping</changelog>
  <changelog author="mimi.vx@gmail.com" date="1561464000">- update to 2.6.0 (bsc#1200603)
- drop relaxed.patch and 1311.patch
  * add a new keyword argument to SSHClient.connect &lt;paramiko.client.SSHClient.connect&gt;
    and paramiko.transport.Transport -&gt; disabled_algorithms
  * Fix Ed25519 key handling so certain key comment lengths don't cause
    SSHException("Invalid key")
  * Add backwards-compatible support for the gssapi</changelog>
  <changelog author="mimi.vx@gmail.com" date="1576929600">- update to 2.7.1
- add configs.tar.gz with missing test data
  * full changelog at http://www.paramiko.org/changelog.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1599220800">- update to 2.7.2 (bsc#1166758, bsc#1166758, bsc#1205132)
- drop configs.tar.gz
  * Add missing test suite fixtures directory to MANIFEST.in
  * Remove leading whitespace from OpenSSH RSA test suite static key fixture,
  * Fix incorrect string formatting causing unhelpful error message annotation
    when using Kerberos/GSSAPI.
  * Fix incorrectly swapped order of p and q numbers when loading
    OpenSSH-format RSA private keys.</changelog>
  <changelog author="code@bnavigator.de" date="1602590400">- remove dependency on pytest-relaxed
  * paramiko-pr1655-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1655</changelog>
  <changelog author="steven.kowalik@suse.com" date="1607342400">- Set environment to utf-8 to allow tests to pass on Python 2. (bsc#1178341)</changelog>
  <changelog author="ecsos@opensuse.org" date="1634040000">- Update to 2.8.0
  - [Feature] #1846: Add a prefetch keyword argument to
    SFTPClient.get/SFTPClient.getfo so users who need to skip SFTP
    prefetching are able to conditionally turn it off.
  - [Bug] #1462: (via #1882) Newer server-side key exchange
    algorithms not intended to use SHA1 (diffie-hellman-group14-sha256,
    diffie-hellman-group16-sha512) were incorrectly using SHA1 after all,
    due to a bug causing them to ignore the hash_algo class attribute.
    This has been corrected.
  - [Support] #1722: Remove leading whitespace from OpenSSH RSA test
    suite static key fixture, to conform better to spec.
  - [Support] #1727: Add missing test suite fixtures directory to
    MANIFEST.in, reinstating the ability to run Paramiko’s tests from
    an sdist tarball.
  - [Support]: Update our CI to catch issues with sdist generation,
    installation and testing.
  - [Support]: Administrivia overhaul, including but not limited to:
  - Migrate CI to CircleCI
  - Primary dev branch is now main (renamed)
  - Many README edits for clarity, modernization etc; including
    a bunch more (and consistent) status badges &amp; unification with
    main project site index
  - PyPI page much more fleshed out (long_description is now filled
    in with the README; sidebar links expanded; etc)
  - flake8, pytest configs split out of setup.cfg into their own files
  - Invoke/invocations (used by maintainers/contributors) upgraded
    to modern versions
- Skip python2 to fix build errors for Leap.
- Rebase paramiko-pr1655-remove-pytest-relaxed.patch.</changelog>
  <changelog author="michael@stroeder.com" date="1647604800">- Update to 2.10.3 (bsc#1197279, CVE-2022-24302)
  Too many changes to be listed here:
  https://www.paramiko.org/changelog.html</changelog>
  <changelog author="pgajdos@suse.com" date="1649419200">- do not require python-mock for build</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 2.10.4:
  * Servers offering certificate variants of hostkey algorithms (eg
    ssh-rsa-cert-v01@openssh.com) could not have their host keys verified by
    Paramiko clients, as it only ever considered non-cert key types for that
    part of connection handshaking. This has been fixed.
  * gq PKey instances’ __eq__ did not have the usual safety guard in place to
    ensure they were being compared to another PKey object, causing occasional
    spurious BadHostKeyException (among other things). This has been fixed.
  * Update camelCase method calls against the threading module to be snake_case;
    this and related tweaks should fix some deprecation warnings under Python 3.10.</changelog>
  <changelog author="michael@stroeder.com" date="1653566400">- update to 2.11.0
  * [Feature] #1951: Add SSH config token expansion (eg %h, %p) when
    parsing ProxyJump directives.
  * [Support] #2004: (via #2011) Apply unittest skipIf to tests currently
    using SHA1 in their critical path, to avoid failures on systems starting
    to disable SHA1 outright in their crypto backends (eg RHEL 9).
  * [Support] #1838: (via #1870/#2028) Update camelCase method calls
    against the threading module to be snake_case; this and related tweaks
    should fix some deprecation warnings under Python 3.10.
  * [Support] #2038: (via #2039) Recent versions of Cryptography have
    deprecated Blowfish algorithm support; in lieu of an easy method for
    users to remove it from the list of algorithms Paramiko tries to import
    and use, we’ve decided to remove it from our “preferred algorithms” list.
    This will both discourage use of a weak algorithm, and avoid warnings.
- update to 2.10.5
  * [Bug] #2008: (via #2010) Windows-native SSH agent support as merged in
    2.10 could encounter Errno 22 OSError exceptions in some scenarios
    (eg server not cleanly closing a relevant named pipe).
    This has been worked around and should be less problematic.
  * [Bug] #2017: OpenSSH 7.7 and older has a bug preventing it from
    understanding how to perform SHA2 signature verification for RSA
    certificates (specifically certs - not keys), so when we added SHA2
    support it broke all clients using RSA certificates with these servers.
    This has been fixed in a manner similar to what OpenSSH’s own client
    does: a version check is performed and the algorithm used is downgraded
    if needed.
  * [Bug] #1933: Align signature verification algorithm with OpenSSH re:
    zero-padding signatures which don’t match their nominal size/length. This
    shouldn’t affect most users, but will help Paramiko-implemented SSH
    servers handle poorly behaved clients such as PuTTY.</changelog>
  <changelog author="code@bnavigator.de" date="1668945600">- Update to 2.12.0
  * [Feature] #2125: (also re: #2054) Add a transport_factory kwarg
    to SSHClient.connect for advanced users to gain more control
    over early Transport setup and manipulation. Thanks to Noah
    Pederson for the patch.
- Release 2.11.1
  * [Bug]: bug:1637 (via #1599) Raise SSHException explicitly when
    blank private key data is loaded, instead of the natural result
    of IndexError. This should help more bits of Paramiko or
    Paramiko-adjacent codebases to correctly handle this class of
    error. Credit: Nicholas Dietz.
  * [Bug] #1822: (via, and relating to, far too many other issues
    to mention here) Update SSHClient so it explicitly closes its
    wrapped socket object upon encountering socket errors at
    connection time. This should help somewhat with certain classes
    of memory leaks, resource warnings, and/or errors (though we
    hasten to remind everyone that Client and Transport have their
    own .close() methods for use in non-error situations!). Patch
    courtesy of @YoavCohen.
- Rename and refresh:
  - paramiko-pr1655-remove-pytest-relaxed.patch
  + paramiko-pr1665-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1665</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683892800">- Delete paramiko-pr1665-remove-pytest-relaxed.patch
- Add remove-icecream-dep.patch
- Update to 3.1.0:
  * [Feature] #2173: Accept single tabs as field separators (in
    addition to single spaces) in
    &lt;paramiko.hostkeys.HostKeyEntry.from_line&gt; for parity with
    OpenSSH’s KnownHosts parser. Patched by Alex Chavkin.
  * [Feature] #2013: (solving #2009, plus others) Add an explicit
    channel_timeout keyword argument to
    paramiko.client.SSHClient.connect, allowing users to configure the
    previously-hardcoded default value of 3600 seconds. Thanks to
    @VakarisZ and @ilija-lazoroski for the report and patch, with
    credit to Mike Salvatore for patch review.
  * [Support] #2178: Apply codespell to the codebase, which found a
    lot of very old minor spelling mistakes in docstrings. Also
    modernize many instances of *largs vs *args and **kwarg vs
  * *kwargs. Patch courtesy of Yaroslav Halchenko, with review from
    Brian Skinn.
- 3.0.0:
  * [Bug]: A handful of lower-level classes (notably
    paramiko.message.Message and paramiko.pkey.PKey) previously
    returned bytes objects from their implementation of __str__, even
    under Python 3; and there was never any __bytes__ method.
  * These issues have been fixed by renaming __str__ to __bytes__ and
    relying on Python’s default “stringification returns the output of
    __repr__” behavior re: any real attempts to str() such objects.
  * [Bug] #2165: Streamline some redundant (and costly) byte
    conversion calls in the packetizer and the core SFTP module. This
    should lead to some SFTP speedups at the very least. Thanks to
    Alex Gaynor for the patch.
  * [Bug] #2110: Remove some unnecessary __repr__ calls when handling
    bytes-vs-str conversions. This was apparently doing a lot of
    unintentional data processing, which adds up in some use cases –
    such as SFTP transfers, which may now be significantly faster.
    Kudos to Shuhua Zhong for catch &amp; patch.
  * [Support]: Drop support for Python versions less than 3.6,
    including Python 2. So long and thanks for all the fish!
  * [Support]: Remove the now irrelevant paramiko.py3compat module.
  * [Support]: paramiko.common.asbytes has been moved to
    paramiko.util.asbytes.
  * [Support]: PKey.__cmp__ has been removed. Ordering-oriented
    comparison of key files is unlikely to have ever made sense (the
    old implementation attempted to order by the hashes of the key
    material) and so we have not bothered setting up __lt__ and
    friends at this time. The class continues to have its original
    __eq__ untouched.
  * [Support]: The behavior of private key classes’ (ie anything
    inheriting from PKey) private key writing methods used to perform
    a manual, extra chmod call after writing. This hasn’t been
    strictly necessary since the mid 2.x release line (when key
    writing started giving the mode argument to os.open), and has now
    been removed entirely.
  * This should only be observable if you were mocking Paramiko’s
    system calls during your own testing, or similar.
  * [Support] #732: (also re: #630) SSHConfig used to straight-up
    delete the proxycommand key from config lookup results when the
    source config said ProxyCommand none. This has been altered to
    preserve the key and give it the Python value None, thus making
    the Python representation more in line with the source config
    file.
  * [Support]: paramiko.util.retry_on_signal (and any internal uses of
    same, and also any internal retries of EINTR on eg socket
    operations) has been removed. As of Python 3.5, per PEP 475, this
    functionality (and retrying EINTR generally) is now part of the
    standard library.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1695988800">- refresh remove-icecream-dep.patch
- update to 3.3.1
  detailed changelog: https://www.paramiko.org/changelog.html#</changelog>
  <changelog author="steven.kowalik@suse.com" date="1703073600">- Update to 3.4.0: (CVE-2023-48795, bsc#1218168)
  * Transport grew a new packetizer_class kwarg for overriding the
    packet-handler class used internally.
  * Address CVE 2023-48795 (aka the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    + The vulnerability only impacts encrypt-then-MAC digest algorithms in
    tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
    currently only implements hmac-sha2-(256|512)-etm in tandem with
    AES-CBC.
    + As the fix for the vulnerability requires both ends of the connection
    to cooperate, the below changes will only take effect when the remote
    end is OpenSSH &gt;= 9.6 (or equivalent, such as Paramiko in server mode,
    as of this patch version) and configured to use the new
    "strict kex" mode.
    + Paramiko will now raise an SSHException subclass (MessageOrderError)
    when protocol messages are received in unexpected order. This includes
    situations like receiving MSG_DEBUG or MSG_IGNORE during initial key
    exchange, which are no longer allowed during strict mode.
    + Key (re)negotiation -- i.e. MSG_NEWKEYS, whenever it is encountered --
    now resets packet sequence numbers. (This should be invisible to users
    during normal operation, only causing exceptions if the exploit is
    encountered, which will usually result in, again, MessageOrderError.)
    + Sequence number rollover will now raise SSHException if it occurs
    during initial key exchange (regardless of strict mode status).
  * Tweak ext-info-(c|s) detection during KEXINIT protocol phase; the
    original implementation made assumptions based on an OpenSSH
    implementation detail.
- Add patch use-64-bit-maxsize-everywhere.patch:
  * Use the 64-bit value of sys.maxsize.</changelog>
</package>
<package pkgid="d8d7ad0157313fa4354d7d9dfb8577d100d87f440c45a85424e05d1ad05a8fc4" name="python-pathspec" arch="src">
  <version epoch="0" ver="0.11.1" rel="150400.9.7.2"/>
  <changelog author="toddrme2178@gmail.com" date="1516190400">- Initial version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1525953600">- Update to 0.5.6
  * Improved unit tests.
  * Improved type checking.
  * `Issue #20`_: Support current directory prefix.
- Use license tag</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550145600">- Update to v0.5.9
  * Fixed file system error handling.
- from v0.5.8
  * Improved type checking.
  * Created scripts to test Python 2.6 because Tox removed support for it.
  * Improved byte string handling in Python 3.
  * Handle dangling symlinks.
- from v0.5.7
  * Fix collections deprecation warning.</changelog>
  <changelog author="tchvatal@suse.com" date="1570708800">- Update to 0.6.0:
  * Issue #24: Drop support for Python 2.6, 3.2, and 3.3.
  * Issue #25: Update README.rst.
  * Issue #26: Method to escape gitwildmatch.</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- update to 0.7.0
  * Add support for Python 3.8, and drop Python 3.4.
  * Publish bdist wheel.</changelog>
  <changelog author="jayvdb@gmail.com" date="1602072000">- Update to v0.8.0
  * Expose what patterns matched paths. Added `util.detailed_match_files()`
  * `match_tree()` doesn't return symlinks
  - Add `PathSpec.match_tree_entries` and `util.iter_tree_entries()` to
    support directories and symlinks
  - API change: `match_tree()` has been renamed to `match_tree_files()`
    The old name `match_tree()` is still available as an alias
  - API change: `match_tree_files()` now returns symlinks</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 0.8.1:
  * `Issue #43`_: Add support for addition operator</changelog>
  <changelog author="pgajdos@suse.com" date="1622548800">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- update to 0.9.0:
  * Raise `GitWildMatchPatternError` for invalid git patterns.
  * Fix for duplicate leading double-asterisk, and edge cases.
  * Fix matching absolute paths.
  * API change: `util.normalize_files()` now returns a
    `Dict[str, List[pathlike]]` instead of a `Dict[str, pathlike]`.
  * Added type hinting.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1662984000">- update to 0.10.1:
  * Bug fixes:
    + Fix documentation on pathspec.pattern.RegexPattern.match_file().
    + Issue #60: Remove redundant wheel dep from pyproject.toml.
    + Issue #61: Dist failure for Fedora, CentOS, EPEL.
    + Issue #62: Since version 0.10.0 pure wildcard does not work
    in some cases.
  * Improvements:
    + Restore support for legacy installations using setup.py. See
    Issue #61.
- additional changes from 0.10.0:
  * Major changes:
    + Dropped support of EOL Python 2.7, 3.5, 3.6. See Issue #47
    + The gitwildmatch pattern dir/* is now handled the same as
    dir/
    + Added pathspec.GitIgnoreSpec class (see new features)
    + Changed build system to pyproject.toml and build backend to
    setuptools.build_meta which may have unforeseen consequences
    + Renamed GitHub project from python-path-specification to
    python-pathspec. See Issue #35.
  * API changes:
    + Deprecated: pathspec.util.match_files() is an old function no
    longer used.
    + Deprecated: pathspec.match_files() is an old function no
    longer used.
    + Deprecated: pathspec.util.normalize_files() is no longer used
    + Deprecated: pathspec.util.iter_tree() is an alias for
    pathspec.util.iter_tree_files().
    + Deprecated: pathspec.iter_tree() is an alias for
    pathspec.util.iter_tree_files().
    + Deprecated: pathspec.pattern.Pattern.match() is no longer
    used. Use or implement pathspec.pattern.Pattern.match_file().
  * New features:
    + Added class pathspec.gitignore.GitIgnoreSpec (with alias
    pathspec.GitIgnoreSpec) to implement gitignore behavior not
    possible with standard PathSpec class
  * Bug fixes:
    + Issue #19: Files inside an ignored sub-directory are not
    matched.
    + Issue #41: Incorrectly (?) matches files inside directories
    that do match.
    + Issue #51: Refactor deprecated unittest aliases for Python
    3.11 compatibility.
    + Issue #53: Symlink pathspec_meta.py breaks Windows.
    + Issue #54: test_util.py uses os.symlink which can fail on
    Windows.
    + Issue #55: Backslashes at start of pattern not handled
    correctly.
    + Issue #56: pyproject.toml: include subpackages in setuptools
    config
    + Issue #57: ! doesn't exclude files in directories if the
    pattern doesn't have a trailing slash.
  * Improvements:
    + Support Python 3.10, 3.11.
    + Modernize code to Python 3.7.
    + Issue #52: match_files() is not a pure generator function,
    and it impacts tree_*() gravely.
- add BuildRequires for python &gt;= 3.7</changelog>
  <changelog author="yarunachalam@suse.com" date="1670068800">- Update to version 0.10.2:
  Bug fixes:
  * Fix failing tests on Windows.
  * Type hint on root parameter on pathspec.pathspec.PathSpec.match_tree_entries().
  * Type hint on root parameter on pathspec.pathspec.PathSpec.match_tree_files().
  * Type hint on root parameter on pathspec.util.iter_tree_entries().
  * Type hint on root parameter on pathspec.util.iter_tree_files().
  * Issue #64: IndexError with my .gitignore file when trying to build a Python package.
  Improvements:
  * Issue #58: CI: add GitHub Actions test workflow.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670932800">- Update to version 0.10.3
  * New features:
  Added utility function pathspec.util.append_dir_sep() to aid in distinguishing between directories and files on the file-system. See Issue #65.
  * Bug fixes:
  Issue #66/Pull #67: Package not marked as py.typed.
  Issue #68: Exports are considered private.
  Issue #70/Pull #71: 'Self' string literal type is Unknown in pyright.
  * Improvements:
  Issue #65: Checking directories via match_file() does not work on Path objects.</changelog>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 0.11.1:
  * `Issue #74`_: Include directory should override exclude file.
  * `Pull #75`_: Fix partially unknown PathLike type.
  * Convert `os.PathLike` to a string properly using `os.fspath`.
  * Major changes:
  * Changed build backend to `flit_core.buildapi`_ from
    `setuptools.build_meta`_. Building with `setuptools` through
    `setup.py` is still supported for distributions that need it.
  * `Issue #72`_/`Pull #73`_: Please consider switching the
    build-system to flit_core to ease setuptools bootstrap.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f06101919ed389a8708a1f54aea56128f78159209f19cc5625f7ce41282ed01f" name="python-pip" arch="src">
  <version epoch="0" ver="22.3.1" rel="150400.17.16.4"/>
  <changelog author="code@bnavigator.de" date="1602417600">- Update to 20.2.3
  Deprecations and Removals
  * Deprecate support for Python 3.5 (#8181)
  Features
  * Make the setup.py install deprecation warning less
    noisy. We warn only when setup.py install succeeded and
    setup.py bdist_wheel failed, as situations where both
    fails are most probably irrelevant to this deprecation.
    (#8752)
- 20.2.2
  Bug Fixes
  * Only attempt to use the keyring once and if it fails, don’t try
    again. This prevents spamming users with several keyring unlock
    prompts when they cannot unlock or don’t want to do so. (#8090)
  * Fix regression that distributions in system site-packages are
    not correctly found when a virtual environment is configured
    with system-site-packages on. (#8695)
  * Disable caching for range requests, which causes corrupted
    wheels when pip tries to obtain metadata using the feature
    fast-deps. (#8701, #8716)
  * Always use UTF-8 to read pyvenv.cfg to match the built-in venv.
    (#8717)
  * 2020 Resolver: Correctly handle marker evaluation in
    constraints and exclude them if their markers do not match the
    current environment. (#8724)
- 20.2.1
  Features
  * Ignore require-virtualenv in pip list (#8603)
  Bug Fixes
  * Correctly find already-installed distributions with dot (.) in
    the name and uninstall them when needed. (#8645)
  * Trace a better error message on installation failure due to
    invalid .data files in wheels. (#8654)
  * Fix SVN version detection for alternative SVN distributions.
    (#8665)
  * New resolver: Correctly include the base package when specified
    with extras in --no-deps mode. (#8677)
  * Use UTF-8 to handle ZIP archive entries on Python 2 according
    to PEP 427, so non-ASCII paths can be resolved as expected.
    (#8684)
  Improved Documentation
  * Add details on old resolver deprecation and removal to
    migration documentation. (#8371)
  * Fix feature flag name in docs. (#8660)
- 20.2 (2020-07-29)
  Deprecations and Removals
  * Deprecate setup.py-based builds that do not generate an .egg-
    info directory. (#6998, #8617)
  * Disallow passing install-location-related arguments in --
    install-options. (#7309)
  * Add deprecation warning for invalid requirements format
    “base&gt;=1.0[extra]” (#8288)
  * Deprecate legacy setup.py install when building a wheel failed
    for source distributions without pyproject.toml (#8368)
  * Deprecate -b/--build/--build-dir/--build-directory. Its current
    behaviour is confusing and breaks in case different versions of
    the same distribution need to be built during the resolution
    process. Using the TMPDIR/TEMP/TMP environment variable,
    possibly combined with --no-clean covers known use cases.
    (#8372)
  * Remove undocumented and deprecated option --always-unzip
    (#8408)
  Features
  * Log debugging information about pip, in pip install --verbose.
    (#3166)
  * Refine error messages to avoid showing Python tracebacks when
    an HTTP error occurs. (#5380)
  * Install wheel files directly instead of extracting them to a
    temp directory. (#6030)
  * Add a beta version of pip’s next-generation dependency
    resolver.
  * Move pip’s new resolver into beta, remove the --unstable-
    feature=resolver flag, and enable the --use-feature=2020-
    resolver flag. The new resolver is significantly stricter and
    more consistent when it receives incompatible instructions, and
    reduces support for certain kinds of Constraints Files, so some
    workarounds and workflows may break. More details about how to
    test and migrate, and how to report issues, at Changes to the
    pip dependency resolver in 20.2 (2020) . Maintainers are
    preparing to release pip 20.3, with the new resolver on by
    default, in October. (#6536)
  * Introduce a new ResolutionImpossible error, raised when pip
    encounters un-satisfiable dependency conflicts (#8546, #8377)
  * Add a subcommand debug to pip config to list available
    configuration sources and the key-value pairs defined in them.
    (#6741)
  * Warn if index pages have unexpected content-type (#6754)
  * Allow specifying --prefer-binary option in a requirements file (#7693)
  * Generate PEP 376 REQUESTED metadata for user supplied
    requirements installed by pip. (#7811)
  * Warn if package url is a vcs or an archive url with invalid
    scheme (#8128)
  * Parallelize network operations in pip list. (#8504)
  * Allow the new resolver to obtain dependency information through
    wheels lazily downloaded using HTTP range requests. To enable
    this feature, invoke pip with --use-feature=fast-deps. (#8588)
  * Support --use-feature in requirements files (#8601)
  * Bug Fixes
  * Use canonical package names while looking up already installed
    packages. (#5021)
  * Fix normalizing path on Windows when installing package on
    another logical disk. (#7625)
  * The VCS commands run by pip as subprocesses don’t merge stdout
    and stderr anymore, improving the output parsing by subsequent
    commands. (#7968)
  * Correctly treat non-ASCII entry point declarations in wheels so
    they can be installed on Windows. (#8342)
  * Update author email in config and tests to reflect
    decommissioning of pypa-dev list. (#8454)
  * Headers provided by wheels in .data directories are now
    correctly installed into the user-provided locations, such as
  - -prefix, instead of the virtual environment pip is running in.
    (#8521)
  Vendored Libraries
  * Vendored htmlib5 no longer imports deprecated
    xml.etree.cElementTree on Python 3.
  * Upgrade appdirs to 1.4.4
  * Upgrade certifi to 2020.6.20
  * Upgrade distlib to 0.3.1
  * Upgrade html5lib to 1.1
  * Upgrade idna to 2.10
  * Upgrade packaging to 20.4
  * Upgrade requests to 2.24.0
  * Upgrade six to 1.15.0
  * Upgrade toml to 0.10.1
  * Upgrade urllib3 to 1.25.9
  Improved Documentation
  * Add --no-input option to pip docs (#7688)
  * List of options supported in requirements file are extracted
    from source of truth, instead of being maintained manually.
    (#7908)
  * Fix pip config docstring so that the subcommands render
    correctly in the docs (#8072)
  * replace links to the old pypa-dev mailing list with https://
    mail.python.org/mailman3/lists/distutils-sig.python.org/
    (#8353)
  * Fix example for defining multiple values for options which
    support them (#8373)
  * Add documentation for the ResolutionImpossible error that helps
    the user fix dependency conflicts (#8459)
  * Add feature flags to docs (#8512)
  * Document how to install package extras from git branch and
    source distributions. (#8576)
- 20.2b1
  Bug Fixes
  * Correctly treat wheels containing non-ASCII file contents so
    they can be installed on Windows. (#5712)
  * Prompt the user for password if the keyring backend doesn’t
    return one (#7998)
  Improved Documentation
  * Add GitHub issue template for reporting when the dependency
    resolver fails (#8207)
- 20.1.1
  Deprecations and Removals
  * Revert building of local directories in place, restoring the
    pre-20.1 behaviour of copying to a temporary directory. (#7555)
  * Drop parallelization from pip list --outdated. (#8167)
  Bug Fixes
  * Fix metadata permission issues when umask has the executable
    bit set. (#8164)
  * Avoid unnecessary message about the wheel package not being
    installed when a wheel would not have been built. Additionally,
    clarify the message. (#8178)
- 20.1
  Process
  * Document that pip 21.0 will drop support for Python 2.7.
  Features
  * Add pip cache dir to show the cache directory. (#7350)
  Bug Fixes
  * Abort pip cache commands early when cache is disabled. (#8124)
  * Correctly set permissions on metadata files during wheel
    installation, to permit non-privileged users to read from
    system site-packages. (#8139)
- 20.1b1
  Deprecations and Removals
  * Remove emails from AUTHORS.txt to prevent usage for spamming,
    and only populate names in AUTHORS.txt at time of release
    (#5979)
  * Remove deprecated --skip-requirements-regex option. (#7297)
  * Building of local directories is now done in place, instead of
    a temporary location containing a copy of the directory tree.
    (#7555)
  * Remove unused tests/scripts/test_all_pip.py test script and the
    tests/scripts folder. (#7680)
  Features
  * pip now implements PEP 610, so pip freeze has better fidelity
    in presence of distributions installed from Direct URL
    requirements. (#609)
  * Add pip cache command for inspecting/managing pip’s wheel
    cache. (#6391)
  * Raise error if --user and --target are used together in pip
    install (#7249)
  * Significantly improve performance when --find-links points to a
    very large HTML page. (#7729)
  * Indicate when wheel building is skipped, due to lack of the
    wheel package. (#7768)
  * Change default behaviour to always cache responses from
    trusted-host source. (#7847)
  * An alpha version of a new resolver is available via --unstable-
    feature=resolver. (#988)
  Bug Fixes
  * Correctly freeze a VCS editable package when it is nested
    inside another VCS repository. (#3988)
  * Correctly handle %2F in URL parameters to avoid accidentally
    unescape them into /. (#6446)
  * Reject VCS URLs with an empty revision. (#7402)
  * Warn when an invalid URL is passed with --index-url (#7430)
  * Use better mechanism for handling temporary files, when
    recording metadata about installed files (RECORD) and the
    installer (INSTALLER). (#7699)
  * Correctly detect global site-packages availability of virtual
    environments created by PyPA’s virtualenv&gt;=20.0. (#7718)
  * Remove current directory from sys.path when invoked as
    python -m pip &lt;command&gt; (#7731)
  * Stop failing uninstallation, when trying to remove non-
    existent files. (#7856)
  * Prevent an infinite recursion with pip wheel when $TMPDIR is
    within the source directory. (#7872)
  * Significantly speedup pip list --outdated by parallelizing
    index interaction. (#7962)
  * Improve Windows compatibility when detecting writability in
    folder. (#8013)
  Vendored Libraries
  * Update semi-supported debundling script to reflect that
    appdirs is vendored.
  * Add ResolveLib as a vendored dependency.
  * Upgrade certifi to 2020.04.05.1
  * Upgrade contextlib2 to 0.6.0.post1
  * Upgrade distro to 1.5.0.
  * Upgrade idna to 2.9.
  * Upgrade msgpack to 1.0.0.
  * Upgrade packaging to 20.3.
  * Upgrade pep517 to 0.8.2.
  * Upgrade pyparsing to 2.4.7.
  * Remove pytoml as a vendored dependency.
  * Upgrade requests to 2.23.0.
  * Add toml as a vendored dependency.
  * Upgrade urllib3 to 1.25.8.
  Improved Documentation
  * Emphasize that VCS URLs using git, git+git and git+http are
    insecure due to lack of authentication and encryption (#1983)
  * Clarify the usage of --no-binary command. (#3191)
  * Clarify the usage of freeze command in the example of Using pip in your program (#7008)
  * Add a “Copyright” page. (#7767)
  * Added example of defining multiple values for options which
    support them (#7803)
- Test on test flavor without installing package
- Update pip-shipped-requests-cabundle.patch for newer certifi</changelog>
  <changelog author="code@bnavigator.de" date="1604059200">- Make executables setup compatible with multiple python3 flavors
  * gh#openSUSE/python-rpm-macros#66
  * update-alternatives for pip3
  * use %python_clone and %python_install_alternative for sip and
    sip3
  * use original bin/sip%{python_bin_suffix} as is
  * effect: consistent shebangs and specifiers inside the
    entry_point scripts</changelog>
  <changelog author="mcepl@suse.com" date="1605268800">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).
- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Actually, test the new structure of package. :$
- Remove the additional sourced setuptools*.whl and use BR on
  python-setuptools-wheel.</changelog>
  <changelog author="mcepl@suse.com" date="1607688000">- Add remove_mock.patch to remove dependency on the external mock
  package (gh#pypa/pip#9266).</changelog>
  <changelog author="mcepl@suse.com" date="1607860800">- We don't need to break Python 2.7</changelog>
  <changelog author="code@bnavigator.de" date="1607947200">- Fix the condition to really not break Python 2.7 in Leap</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 20.2.4:
  Deprecations and Removals
  * Document that certain removals can be fast tracked.
  * Document that Python versions are generally supported until
    PyPI usage falls below 5%
  Features
  * New resolver: Avoid accessing indexes when the installed
    candidate is preferred and considered good enough
  * Improve error message friendliness when an environment
    has packages with corrupted metadata
  * Cache package listings on index packages so they are guarenteed
    to stay stable during a pip command session. This also improves
    performance when a index page is accessed multiple times during
    the command session
  * New resolver: Tweak resolution logic to improve user experience
    when user-supplied requirements conflict
  Bug Fixes
  * New resolver: Correctly respect ``Requires-Python`` metadata
    to reject incompatible packages in ``--no-deps`` mode
  * New resolver: Pick up hash declarations in constraints files
    and use them to filter available distributions
  * New resolver: If a package appears multiple times in user
    specification with different ``--hash`` options, only hashes
    that present in all specifications should be allowed</changelog>
  <changelog author="schubi@suse.de" date="1631102400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="dmueller@suse.com" date="1636286400">- update to 21.3.1:
  * Always refuse installing or building projects that have no ``pyproject.toml`` nor
    ``setup.py``.
  * Tweak running-as-root detection, to check ``os.getuid`` if it exists, on
    Unix-y and non-Linux/non-MacOS machines.
  * When installing projects with a ``pyproject.toml`` in editable mode, and the build
    backend does not support :pep:`660`, prepare metadata using
    ``prepare_metadata_for_build_wheel`` instead of ``setup.py egg_info``. Also, refuse
    installing projects that only have a ``setup.cfg`` and no ``setup.py`` nor
    ``pyproject.toml``. These restore the pre-21.3 behaviour.
  * Restore compatibility of where configuration files are loaded from on MacOS
  * Upgrade pep517 to 0.12.0
  * Improve deprecation warning regarding the copying of source trees when
    installing from a local directory.
  * Suppress location mismatch warnings when pip is invoked from a Python source
    tree, so ``ensurepip`` does not emit warnings on CPython ``make install``.
  * On Python 3.10 or later, the installation scheme backend has been changed to use
    ``sysconfig``. This is to anticipate the deprecation of ``distutils`` in Python
    3.10, and its scheduled removal in 3.12. For compatibility considerations, pip
    installations running on Python 3.9 or lower will continue to use ``distutils``.
  * Remove the ``--build-dir`` option and aliases, one last time.
  * In-tree builds are now the default. ``--use-feature=in-tree-build`` is now
    ignored. ``--use-deprecated=out-of-tree-build`` may be used temporarily to ease
    the transition.
  * Un-deprecate source distribution re-installation behaviour.
  * Replace vendored appdirs with platformdirs.
  * Support `PEP 610 &lt;https://www.python.org/dev/peps/pep-0610/&gt;`_ to detect
    editable installs in ``pip freeze`` and  ``pip list``. The ``pip list`` column output
    has a new ``Editable project location`` column, and the JSON output has a new
    ``editable_project_location`` field.
  * ``pip freeze`` will now always fallback to reporting the editable project
    location when it encounters a VCS error while analyzing an editable
    requirement. Before, it sometimes reported the requirement as non-editable.
  * ``pip show`` now sorts ``Requires`` and ``Required-By`` alphabetically.
  * Do not raise error when there are no files to remove with ``pip cache purge/remove``.
    Instead log a warning and continue (to log that we removed 0 files).
  * When backtracking during dependency resolution, prefer the dependencies
    which are involved in the most recent conflict. This can significantly
    reduce the amount of backtracking required.
  * Cache requirement objects, to improve performance reducing reparses of requirement strings.
  * Support editable installs for projects that have a ``pyproject.toml`` and use a
    build backend that supports :pep:`660`.
  * When a revision is specified in a Git URL, use git's partial clone feature
    to speed up source retrieval.
  * Add a ``--debug`` flag, to enable a mode that doesn't log errors and
    propagates them to the top level instead. This is primarily to aid with
    debugging pip's crashes.
  * If a host is explicitly specified as trusted by the user (via the
  - -trusted-host option), cache HTTP responses from it in addition to HTTPS
    ones.
  * Present a better error message, when a ``file:`` URL is not found.
  * Fix the auth credential cache to allow for the case in which
    the index url contains the username, but the password comes
    from an external source, such as keyring.
  * Fix double unescape of HTML ``data-requires-python`` and ``data-yanked`` attributes.
  * New resolver: Fixes depth ordering of packages during resolution, e.g. a
    dependency 2 levels deep will be ordered before a dependecy 3 levels deep.
- drop remove_mock.patch (upstream)</changelog>
  <changelog author="mcepl@suse.com" date="1647518400">- Update to 22.0.4:
  - Drop the doctype check, that presented a warning for index
    pages that use non-compliant HTML 5.
- Update to 22.0.3:
  - Print the exception via rich.traceback, when running with
  - -debug.
  - Only calculate topological installation order, for packages
    that are going to be installed/upgraded.
  - This fixes an AssertionError that occured when determining
    installation order, for a very specific combination of
    upgrading-already-installed-package + change of dependencies
    + fetching some packages from a package index. This
    combination was especially common in Read the Docs'
    builds.
  - Use html.parser by default, instead of falling back
    to html5lib when --use-deprecated=html5lib is not
    passed.
  - Clarify that using per-requirement overrides disables the
    usage of wheels.
- Update to 22.0.2:
  - Instead of failing on index pages that use non-compliant
    HTML 5, print a deprecation warning and fall back to
    html5lib-based parsing for now. This simplifies the migration
    for non-compliant index pages, by letting such indexes
    function with a warning.
- Update to 22.0.1:
  - Accept lowercase &lt;!doctype html&gt; on index pages.
  - Properly handle links parsed by html5lib, when using
  - -use-deprecated=html5lib.
- Update to 22.0:
  - Completely replace :pypi:`tox` in our development workflow,
    with :pypi:`nox`.
  - Deprecate alternative progress bar styles, leaving only on
    and off as available choices.
  - Drop support for Python 3.6.
  - Disable location mismatch warnings on Python versions prior
    to 3.10.
  - These warnings were helping identify potential issues as part
    of the sysconfig -&gt; distutils transition, and we no longer
    need to rely on reports from older Python versions for
    information on the transition.
  - Changed PackageFinder to parse HTML documents using the
    stdlib :class:`html.parser.HTMLParser` class instead of the
    html5lib package.
  - For now, the deprecated html5lib code remains and can be used
    with the --use-deprecated=html5lib command line option.
    However, it will be removed in a future pip release.
  - Utilise rich for presenting pip's default download progress
    bar.
  - Present a better error message when an invalid wheel file is
    encountered, providing more context where the invalid wheel
    file is.
  - Documents the --require-virtualenv flag for pip install.
  - pip install &lt;tab&gt; autocompletes paths.
  - Allow Python distributors to opt-out from or opt-in to the
    sysconfig installation scheme backend by setting
    sysconfig._PIP_USE_SYSCONFIG to True or False.
  - Make it possible to deselect tests requiring cryptography
    package on systems where it cannot be installed.
  - Start using Rich for presenting error messages in
    a consistent format.
  - Improve presentation of errors from subprocesses.
  - Forward pip's verbosity configuration to VCS tools to control
    their output accordingly.
  - Optimize installation order calculation to improve
    performance when installing requirements that form a complex
    dependency graph with a large amount of edges.
  - When a package is requested by the user for upgrade,
    correctly identify that the extra-ed variant of that same
    package depended by another user-requested package is
    requesting the same package, and upgrade it accordingly.
  - Prevent pip from installing yanked releases unless explicitly
    pinned via the == or === operators.
  - Stop backtracking on build failures, by instead surfacing
    them to the user and aborting immediately. This behaviour
    provides more immediate feedback when a package cannot be
    built due to missing build dependencies or platform
    incompatibility.
  - Silence Value for &lt;location&gt; does not match warning caused by
    an erroneous patch in Slackware-distributed Python 3.9.
  - Fix an issue where pip did not consider dependencies with and
    without extras to be equal</changelog>
  <changelog author="code@bnavigator.de" date="1647604800">- Update requirements: v22 is not compatible with Python 3.6 and
  thus not suitable for SLE/Leap 15.</changelog>
  <changelog author="code@bnavigator.de" date="1647691200">- Avoid cycle: BuildRequire ca-certificates only in tests</changelog>
  <changelog author="mcepl@suse.com" date="1655985600">- Add distutils-reproducible-compile.patch to make installed
  files ordered correctly and thus builds reproducible again
  (port of the fix for bpo#29708 and gh#python/cpython#8057).</changelog>
  <changelog author="dmueller@suse.com" date="1660132800">- skip subversion tests, not that relevant to pull in
  dozens of dependencies into small bootstrap</changelog>
  <changelog author="steven.kowalik@suse.com" date="1670500800">- Update to 22.3.1: (bsc#1205478)
  * Deprecations and Removals
    + Deprecate installation with setup.py install when no-binary is enabled
    for source distributions without pyproject.toml. (#11452)
    + Deprecate installation with setup.py install when the wheel package is
    absent for source distributions without pyproject.toml. (#8559)
    + Drop --use-deprecated=out-of-tree-build. (#11001)
  * Features
    + Use the data-dist-info-metadata attribute from PEP 658 to resolve
    distribution metadata without downloading the dist yet. (#11111)
    + Add --dry-run option to pip install, to let it print what it would
    install but not actually make changes in the target environment. (#11096)
    + Add pip inspect command to obtain the list of installed distributions
    and other information about the Python environment, in JSON. (#11245)
    + Add option to install and uninstall commands to opt-out from
    running-as-root warning. (#10556)
    + Add a user interface for supplying config settings to build backends.
    (#11059)
    + Explains why specified version cannot be retrieved when Requires-Python
    is not satisfied. (#9615)
    + Validate build dependencies when using --no-build-isolation. (#9794)
  * Bug Fixes
    + Fix entry point generation of pip.X, pipX.Y, and easy_install-X.Y to
    correctly account for multi-digit Python version segments. (#11547)
    + Fix --no-index when --index-url or --extra-index-url is specified
    inside a requirements file. (#11276)
    + Ignore distributions with invalid Name in metadata instead of crashing,
    when using the importlib.metadata backend. (#11352)
    + Raise RequirementsFileParseError when parsing malformed requirements
    options that can’t be sucessfully parsed by shlex. (#11491)
    + Show pip deprecation warnings by default. (#11330)
    + Send the pip upgrade prompt to stderr. (#11282)
    + Ensure that things work correctly in environments where
    setuptools-injected distutils is available by default. (#11298)
    + pip config now normalizes names by converting underscores into
    dashes. (#9330)
    + Fallback to pyproject.toml-based builds if setup.py is present in a
    project, but setuptools cannot be imported. (#10717)
    + When checking for conflicts in the build environment, correctly skip
    requirements containing markers that do not match the current
    environment. (#10883)
    + Fix pip install issues using a proxy due to an inconsistency in how
    Requests is currently handling variable precedence in session. (#9691)
- Refresh all patches.
- Stop skipping a lot of tests, no longer required.
- Add installer to BuildRequires for the test flavor.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mmachova@suse.com" date="1687176000">- Remove .exe files from package (bsc#1212015)</changelog>
  <changelog author="mcepl@suse.com" date="1700568000">- Add CVE-2023-5752-r-param-hg.patch to fix bsc#1217353
  (CVE-2023-5752) avoiding injection of arbitrary configuration
  through Mercurial parameter.</changelog>
</package>
<package pkgid="4da93f4781085f655b691654d04fe26a26ecb8a39c8185a35e4321a5e3a28c5c" name="python-pkginfo" arch="src">
  <version epoch="0" ver="1.9.6" rel="150400.7.7.1"/>
  <changelog author="speilicke@suse.com" date="1391515200">- Initial version</changelog>
  <changelog author="p.drouand@gmail.com" date="1433246400">- Update to version 1.2.1
  * Add overlooked Trove classifier for Python 3.4.
- Changes from version 1.2 final
  * Add support for Python 3.4, PyPy3.
  * Add 100% coverage for pkginfo.commandline module.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to version 1.4.1
  * Packaging only change (invalid sdist bulit for 1.4.0).
- Update to version 1.4.0
  * Relicense under MIT license: the PSF license is not suitable for third-party libraries.
- Update to version 1.3.2
  * Packaging-only change (automate fix for wheel built for 1.3.1).
- Update to version 1.3.1
  * Packaging-only change (invalid wheel built for 1.3.0).
- Update to version 1.3.0
  * Update homepage URL to point to Launchpad, rather than PyPI.
  * Add support for building wheels.
  * Add support for Python 3.5.
  * Drop support for Python 2.6 and 3.2.
- Implement single-spec version.</changelog>
  <changelog author="hpj@urpla.net" date="1526731200">- Update to version 1.4.2
  - Use relative imports in pkginfo modules.  Supports vendoring of the
    package into setuptools.
  - Add support for ``Provides-Extra`` and ``Description-Content-Type`` fields.
    Per https://packaging.python.org/specifications/.  See:  PEP 566.
  - Remove support for old setuptools leaving ``PKG-INFO`` in the root of
    the project directory.</changelog>
  <changelog author="hpj@urpla.net" date="1526817600">- fix failing tests with sed
- enable tests</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Use noun phrase in summary.</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- version update to 1.5.0.1
  * Fix broken 'sdist'. LP #1639585.
  * Fix 'console_scripts' entry point syntax. LP #1810734.
  * Add support for JSON output from the CLI.
  * Add support for installed wheels.  E.g., 'dist-info/' dirs.
  * Add support for Python 3.6 and 3.7.
  * Drop support for Python 3.3.</changelog>
  <changelog author="jayvdb@gmail.com" date="1597579200">- Remove unnecessary build dependency nose</changelog>
  <changelog author="eroca@suse.com" date="1674216000">- Update to version 1.9.6
    1.9.6 (2023-01-08)
  - -----------------
  - Fix various typos in docs / docstrings.  LP #2002232.
    1.9.5 (2023-01-06)
  - -----------------
  - Add stricter typing checks, matching those used in 'twine'.
  - Fix typing errors / gaps reported from 'twine' CI failure.  LP #2002104.
    1.9.4 (2023-01-05)
  - -----------------
  - Fix packaging of stub file for Python typing support.
    1.9.3 (2023-01-03)
  - -----------------
  - Added stub files for Python typing support;  verify using 'mypy'. LP #1876591.
    1.9.2 (2022-11-29)
  - -----------------
  - Drop "universal" wheel support (should be redundant with
    'python_requires &gt;= 3.6', but just in case).  LP #1998258.
    1.9.1 (2022-11-29)
  - -----------------
  - Restore a deprecated alias for the '_must_decode' helper function, moved
    from 'pkginfo._compat.must_decode' to 'pkginfo.distribution._must_decode'
    in 1.90.
  - Repair unit tests broken by dropping Python 2.7 classifier.
    1.9.0 (2022-11-29)
  - -----------------
  - Drop support for Python 2.7.
  - Switch to use 'pytest' vs. 'nose', which doesn't support Python &gt; 3.9.
    1.8.3 (2022-06-08)
  - -----------------
  - Specify supported Python versions in 'setup.py' using 'python_requires'.
    LP #1977981.
    1.8.2 (2021-12-01)
  - -----------------
  - Add fix for installed distributions with '__package__' set to an empty
    string. LP #1952946.
    1.8.1 (2021-11-19)
  - -----------------
  - Add 'MANIFEST.in' to ensure example files used by tests are included
    in source distributions.  LP #1951553.
    1.8.0 (2021-11-18)
  - -----------------
  - Support new standard metadata location for installed dists. LP #1865286.
  - Don't overwrite header-based 'description' with empty payload. LP #1885458.
  - Add support for Metadata-Version 2.2. LP #1928729.
  - Add support for uncompressed tarballs for sdists.  LP #1951457.
  - Add support for Python 3.10.
    1.7.1 (2021-07-09)
  - -----------------
  - Use Python3 to build docs, and fix doctest examples to use Python3-
    compatible syntax.  LP #1933322.
    1.7.0 (2021-01-16)
  - -----------------
  - Add support for Python 3.9.
  - Drop support for Python 3.5.
    1.6.1 (2020-10-26)
  - -----------------
  - Adjust test classifiers to match supported Python versions. LP #1901127.
    1.6.0 (2020-10-20)
  - -----------------
  - Add support for Python 3.8.
    LP #1869854.
  - Drop support for Python 3.4.
  - Update tests to match setuptools' change, no longer reporting metadata
    version for installed packages w/o explicit metadata.  LP #1870197.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="67644664ae5907dc48471da2fbcc53f1d4ca389ce6652bb1aa5fe78737db2a6f" name="python-portalocker" arch="src">
  <version epoch="0" ver="2.7.0" rel="150400.10.7.4"/>
  <changelog author="mcepl@suse.com" date="1526558400">- Initial packaging effort</changelog>
  <changelog author="mcepl@suse.com" date="1526558401">- Fix specfile name</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Clear filler wording from description.</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Update to 1.4.0:
  * no upstream changelog
- Drop patch portalocker-1.2.1-old-Sphinx.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563883200">- Update to 1.5.0:
  * No upstream changelog
- Switch to github tarball to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1568116800">- Update to 1.5.1:
  * no upstream changelog</changelog>
  <changelog author="mcalabkova@suse.com" date="1584532800">- Update to 1.5.2
  * Allow for development setuptools</changelog>
  <changelog author="jayvdb@gmail.com" date="1591185600">- Update to v1.7.0
  * Fix ResourceWarning unclosed file if LockException is raised
- from v1.6.0
  * Fixed unlocking bug on Windows</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Update to 2.7.0:
  * Added fail_when_locked=False support to BoundedSemaphore thanks to
    @flaviens
- 2.6.0:
  * Added fileno() support. Fixes #80 on posix systems
- 2.5.1:
  * Added clear warning when locking in non-blocking mode without
    specifying either EXCLUSIVE or SHARED mode. Fixes #77
- 2.5.0:
  * Fixed shared locks on Windows and simplified locking mechanism
- 2.4.0:
  * Added warning when trying to use a timeout in blocking mode. And
    removed deprecated testing code and checks
- 2.3.2:
  * Added semver indicator and specified needed Python release thanks
    to @rayluo v2.3.2
- 2.3.1:
  * Removed Python 2 classifier thanks to @rayluo v2.3.1
- 2.3.0:
  * enabled PEP 561 compliance v2.3.0
- 2.2.1:
  * removed debug statement v2.2.1
- 2.2.0:
  * updated travis location
- 2.1.0:
  * Added Redis based distributed lock which gracefully handles
    connection loss and dying applications. Added full type hinting
    support. Fixed bug where the file handle was not always explicitly
    closed with errors
- v2.0.0:
  * Removed support for old Python versions. Versions 3.5 and above
    are supported. Added BoundedSemaphore class
- 1.7.1:
  * removed tests from wheel file</changelog>
</package>
<package pkgid="7b352d030a88cad5588882d035a111fcd4cf69878067b3a068c5179c68b632fd" name="python-psutil" arch="src">
  <version epoch="0" ver="5.9.5" rel="150400.6.9.4"/>
  <changelog author="code@bnavigator.de" date="1607688000">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
</package>
<package pkgid="466451c749ab8d0c8aedcb59b54437db3c18cbcafd2912313c65233cf698b4a9" name="python-pyparsing" arch="src">
  <version epoch="0" ver="3.0.9" rel="150400.5.7.4"/>
  <changelog author="dimstar@opensuse.org" date="1547726400">- BuildIgnore python[23]-pyparsing: python-packaging requires it
  for some actions it could perform, but we don't make use of these
  here. Ignoring this dependency allows us to break open a
  BuildCycle.</changelog>
  <changelog author="tbechtold@suse.com" date="1554984000">- Do not BuildRequire python-unittest2 when no tests are executed.
  This breaks a build cycle for pyparsing-&gt;unittest2-&gt;traceback2-&gt;pbr-&gt;
  Pygments-&gt;pytest-&gt;setuptools_scm-&gt;packaging which needs pyparsing</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 2.4.0
- drop nose_to_unittest.patch
- drop _service
  * Adds a pyparsing.__compat__ object for specifying compatibility with
  future breaking changes.
  * Conditionalizes the API-breaking behavior, based on the value
  pyparsing.__compat__.collect_all_And_tokens.  By default, this value
  will be set to True, reflecting the new bugfixed behavior.
  * User code that is dependent on the pre-bugfix behavior can restore
  it by setting this value to False.
  * Updated unitTests.py and simple_unit_tests.py to be compatible with
  "python setup.py test".
  * Fixed bug in runTests handling '\n' literals in quoted strings.
  * Added tag_body attribute to the start tag expressions generated by
  makeHTMLTags, so that you can avoid using SkipTo to roll your own
  tag body expression:
  * indentedBlock failure handling was improved
  * Address Py2 incompatibility in simpleUnitTests, plus explain() and
  Forward str() cleanup
  * Fixed docstring with embedded '\w', which creates SyntaxWarnings in Py3.8.
  * Added example parser for rosettacode.org tutorial compiler.
  * Added example to show how an HTML table can be parsed into a
  collection of Python lists or dicts, one per row.
  * Updated SimpleSQL.py example to handle nested selects, reworked
  'where' expression to use infixNotation.
  * Added include_preprocessor.py, similar to macroExpander.py.
  * Examples using makeHTMLTags use new tag_body expression when
  retrieving a tag's body text.
  * Updated examples that are runnable as unit tests</changelog>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 2.4.2:
  - Updated the shorthand notation that has been added for repetition
    expressions: expr[min, max], with '...' valid as a min or max value
  - The defaults on all the `__diag__` switches have been set to False,
    to avoid getting alarming warnings. To use these diagnostics, set
    them to True after importing pyparsing.
  - Fixed bug introduced by the use of __getitem__ for repetition,
    overlooking Python's legacy implementation of iteration
    by sequentially calling __getitem__ with increasing numbers until
    getting an IndexError. Found during investigation of problem
    reported by murlock, merci!
  - Changed [...] to emit ZeroOrMore instead of OneOrMore.
  - Removed code that treats ParserElements like iterables.
  - Change all __diag__ switches to False.
- update to 2.4.1.1:
  - API change adding support for `expr[...]` - the original
    code in 2.4.1 incorrectly implemented this as OneOrMore.
    Code using this feature under this relase should explicitly
    use `expr[0, ...]` for ZeroOrMore and `expr[1, ...]` for
    OneOrMore. In 2.4.2 you will be able to write `expr[...]`
    equivalent to `ZeroOrMore(expr)`.
  - Bug if composing And, Or, MatchFirst, or Each expressions
    using an expression. This only affects code which uses
    explicit expression construction using the And, Or, etc.
    classes instead of using overloaded operators '+', '^', and
    so on. If constructing an And using a single expression,
    you may get an error that "cannot multiply ParserElement by
    0 or (0, 0)" or a Python `IndexError`.
  - Some newly-added `__diag__` switches are enabled by default,
    which may give rise to noisy user warnings for existing parsers.
- update to 2.4.1:
  - A new shorthand notation has been added for repetition
    expressions: expr[min, max], with '...' valid as a min
  - '...' can also be used as short hand for SkipTo when used
    in adding parse expressions to compose an And expression.
  - '...' can also be used as a "skip forward in case of error" expression
  - Improved exception messages to show what was actually found, not
    just what was expected.
  - Added diagnostic switches to help detect and warn about common
    parser construction mistakes, or enable additional parse
    debugging. Switches are attached to the pyparsing.__diag__
    namespace object
  - Added ParseResults.from_dict classmethod, to simplify creation
    of a ParseResults with results names using a dict, which may be nested.
    This makes it easy to add a sub-level of named items to the parsed
    tokens in a parse action.
  - Added asKeyword argument (default=False) to oneOf, to force
    keyword-style matching on the generated expressions.
  - ParserElement.runTests now accepts an optional 'file' argument to
    redirect test output to a file-like object (such as a StringIO,
    or opened file). Default is to write to sys.stdout.
  - conditionAsParseAction is a helper method for constructing a
    parse action method from a predicate function that simply
    returns a boolean result. Useful for those places where a
    predicate cannot be added using addCondition, but must be
    converted to a parse action (such as in infixNotation). May be
    used as a decorator if default message and exception types
    can be used. See ParserElement.addCondition for more details
    about the expected signature and behavior for predicate condition
    methods.
  - While investigating issue #93, I found that Or and
    addCondition could interact to select an alternative that
    is not the longest match. This is because Or first checks
    all alternatives for matches without running attached
    parse actions or conditions, orders by longest match, and
    then rechecks for matches with conditions and parse actions.
    Some expressions, when checking with conditions, may end
    up matching on a shorter token list than originally matched,
    but would be selected because of its original priority.
    This matching code has been expanded to do more extensive
    searching for matches when a second-pass check matches a
    smaller list than in the first pass.
  - Fixed issue #87, a regression in indented block.
    Reported by Renz Bagaporo, who submitted a very nice repro
    example, which makes the bug-fixing process a lot easier,
    thanks!
  - Fixed MemoryError issue #85 and #91 with str generation for
    Forwards. Thanks decalage2 and Harmon758 for your patience.
  - Modified setParseAction to accept None as an argument,
    indicating that all previously-defined parse actions for the
    expression should be cleared.
  - Modified pyparsing_common.real and sci_real to parse reals
    without leading integer digits before the decimal point,
    consistent with Python real number formats. Original PR #98
    submitted by ansobolev.
  - Modified runTests to call postParse function before dumping out
    the parsed results - allows for postParse to add further results,
    such as indications of additional validation success/failure.
  - Updated statemachine example: refactored state transitions to use
    overridden classmethods; added &lt;statename&gt;Mixin class to simplify
    definition of application classes that "own" the state object and
    delegate to it to model state-specific properties and behavior.
  - Added example nested_markup.py, showing a simple wiki markup with
    nested markup directives, and illustrating the use of '...' for
    skipping over input to match the next expression. (This example
    uses syntax that is not valid under Python 2.)
  - Rewrote delta_time.py example (renamed from deltaTime.py) to
    fix some omitted formats and upgrade to latest pyparsing idioms,
    beginning with writing an actual BNF.
  - With the help and encouragement from several contributors, including
    Matěj Cepl and Cengiz Kaygusuz, I've started cleaning up the internal
    coding styles in core pyparsing, bringing it up to modern coding
    practices from pyparsing's early development days dating back to
    2003. Whitespace has been largely standardized along PEP8 guidelines,
    removing extra spaces around parentheses, and adding them around
    arithmetic operators and after colons and commas. I was going to hold
    off on doing this work until after 2.4.1, but after cleaning up a
    few trial classes, the difference was so significant that I continued
    on to the rest of the core code base. This should facilitate future
    work and submitted PRs, allowing them to focus on substantive code
    changes, and not get sidetracked by whitespace issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Do not pull in setuptools dependency at all to avoid cycles</changelog>
  <changelog author="arun@gmx.de" date="1573905600">- update to version 2.4.5:
  * Fixed encoding when setup.py reads README.rst to include the
    project long description when uploading to PyPI. A stray unicode
    space in README.rst prevented the source install on systems whose
    default encoding is not 'utf-8'.
- changes from version 2.4.4:
  * Unresolved symbol reference in 2.4.3 release was masked by stdout
    buffering in unit tests, thanks for the prompt heads-up, Ned
    Batchelder!
- changes from version 2.4.3:
  * Fixed a bug in ParserElement.__eq__ that would for some parsers
    create a recursion error at parser definition time. Thanks to
    Michael Clerx for the assist. (Addresses issue #123)
  * Fixed bug in indentedBlock where a block that ended at the end of
    the input string could cause pyaprsing to loop forever. Raised as
    part of discussion on StackOverflow with geckos.
  * Backports from pyparsing 3.0.0:
    + __diag__.enable_all_warnings()
    + Fixed bug in PrecededBy which caused infinite recursion, issue
    [#127]
    + support for using regex-compiled RE to construct Regex
    expressions</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581422400">- update to 2.4.6
  * Fixed typos in White mapping of whitespace characters, to use
  correct "\u" prefix instead of "u".
  * fix bug in left-associative ternary operators defined using
  infixNotation. First reported on StackOverflow by user Jeronimo.
  * Backport of pyparsing_test namespace from 3.0.0, including
  TestParseResultsAsserts mixin class defining unittest-helper
  methods:
  . def assertParseResultsEquals(
  self, result, expected_list=None, expected_dict=None, msg=None)
  . def assertParseAndCheckList(
  self, expr, test_string, expected_list, msg=None, verbose=True)
  . def assertParseAndCheckDict(
  self, expr, test_string, expected_dict, msg=None, verbose=True)
  . def assertRunTestResults(
  self, run_tests_report, expected_parse_results=None, msg=None)
  . def assertRaisesParseException(self, exc_type=ParseException, msg=None)</changelog>
  <changelog author="dmueller@suse.com" date="1588680000">- update to 2.4.7:
  . Each bug with Regex expressions
  . And expressions not properly constructing with generator
  . Traceback abbreviation
  . Bug in delta_time example
  . Fix regexen in pyparsing_common.real and .sci_real
  . Avoid FutureWarning on Python 3.7 or later
  . Cleanup output in runTests if comments are embedded in test string</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- unittest2 -&gt; pytest</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(pyparsing): work around boo#1186870</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 3.0.6:
  * Added suppress_warning() method to individually suppress a warning
    on a specific ParserElement. Used to refactor original_text_for
    to preserve internal results names, which, while undocumented, had
    been adopted by some projects.
  * Fix bug when delimited_list was called with a str literal instead
    of a parse expression.
- changes from 3.0.5:
  * Added return type annotations for col, line, and lineno.
  * Fixed bug when warn_ungrouped_named_tokens_in_collection warning
    was raised when assigning a results name to an original_text_for
    expression. (Issue #110, would raise warning in packaging.)
  * Fixed internal bug where ParserElement.streamline() would not
    return self if already streamlined.
  * Changed run_tests() output to default to not showing line and
    column numbers. If line numbering is desired, call with
    with_line_numbers=True. Also fixed minor bug where separating
    line was not included after a test failure.
- changes from 3.0.4:
  * Fixed bug in which Dict classes did not correctly return tokens
    as nested ParseResults
  * Documented API-changing side-effect of converting ParseResults
    to use __slots__ to pre-define instance attributes.
  * Fixed bug in railroad diagramming where the vertical limit would
    count all expressions in a group, not just those that would
    create visible railroad elements.
- changes from 3.0.3:
  * Fixed regex typo in one_of fix for as_keyword=True.
  * Fixed a whitespace-skipping bug, Issue #319, introduced as part
    of the revert of the LineStart changes.
  * Added header column labeling &gt; 100 in with_line_numbers - some
    input lines are longer than others.
- changes from 3.0.2:
  * Reverted change in behavior with LineStart and StringStart, which
    changed the interpretation of when and how LineStart and
    StringStart should match when a line starts with spaces. In 3.0.0,
    the xxxStart expressions were not really treated like expressions
    in their own right, but as modifiers to the following expression
    when used like LineStart() + expr, so that if there were whitespace
    on the line before expr (which would match in versions prior to
    3.0.0), the match would fail.
    3.0.0 implemented this by automatically promoting LineStart() +
    expr to AtLineStart(expr), which broke existing parsers that did
    not expect expr to necessarily be right at the start of the line,
    but only be the first token found on the line. This was reported
    as a regression in Issue (gh#pyparsing/pyparsing/issues#317).
    In 3.0.2, pyparsing reverts to the previous behavior, but will
    retain the new AtLineStart and AtStringStart expression classes,
    so that parsers can chose whichever behavior applies in their
    specific instance.
  * Performance enhancement to one_of to always generate an internal
    Regex, even if caseless or as_keyword args are given as True
    (unless explicitly disabled by passing use_regex=False).
  * IndentedBlock class now works with recursive flag. By default,
    the results parsed by an IndentedBlock are grouped. This can be
    disabled by constructing the IndentedBlock with grouped=False.
- changes from 3.0.1
  * Fixed bug where Word(max=n) did not match word groups less than
    length 'n'. Thanks to Joachim Metz for catching this!
  * Fixed bug where ParseResults accidentally created recursive
    contents. Joachim Metz on this one also!
  * Fixed bug where warn_on_multiple_string_args_to_oneof warning
    is raised even when not enabled.
- changes from 3.0.0
  * A consolidated list of all the changes in the 3.0.0 release
    can be found in docs/whats_new_in_3_0_0.rst.
    (https://github.com/pyparsing/pyparsing/blob/master/docs/whats_new_in_3_0_0.rst)
- disable build for python2, not supported anymore</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755201">- requires railroad-diagrams for testing</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755202">- requires jinja2 for testing</changelog>
  <changelog author="arun@gmx.de" date="1643889600">- specfile:
  * update copyright year
- update to version 3.0.7:
  * Fixed bug #345, in which delimitedList changed expressions in
    place using expr.streamline(). Reported by Kim Gräsman, thanks!
  * Fixed bug #346, when a string of word characters was passed to
    WordStart or WordEnd instead of just taking the default
    value. Originally posted as a question by Parag on StackOverflow,
    good catch!
  * Fixed bug #350, in which White expressions could fail to match due
    to unintended whitespace-skipping. Reported by Fu Hanxi, thank
    you!
  * Fixed bug #355, when a QuotedString is defined with characters in
    its quoteChar string containing regex-significant characters such
    as ., *, ?, [, ], etc.
  * Fixed bug in ParserElement.run_tests where comments would be
    displayed using with_line_numbers.
  * Added optional "min" and "max" arguments to `delimited_list`. PR
    submitted by Marius, thanks!
  * Added new API change note in `whats_new_in_pyparsing_3_0_0`,
    regarding a bug fix in the `bool()` behavior of `ParseResults`.
  * Prior to pyparsing 3.0.x, the `ParseResults` class implementation
    of `__bool__` would return `False` if the `ParseResults` item list
    was empty, even if it contained named results. In 3.0.0 and later,
    `ParseResults` will return `True` if either the item list is not
    empty *or* if the named results dict is not empty.
  * Minor enhancement to Word generation of internal regular
    expression, to emit consecutive characters in range, such as "ab",
    as "ab", not "a-b".
  * Fixed character ranges for search terms using non-Western
    characters in booleansearchparser, PR submitted by tc-yu, nice
    work!
  * Additional type annotations on public methods.</changelog>
  <changelog author="code@bnavigator.de" date="1657800000">- Update to version 3.0.9
  * Added Unicode set BasicMultilingualPlane (may also be
    referenced as BMP) representing the Basic Multilingual Plane
    (Unicode characters up to code point 65535). Can be used to
    parse most language characters, but omits emojis, wingdings,
    etc. Raised in discussion with Dave Tapley (issue #392).
  * To address mypy confusion of pyparsing.Optional and
    typing.Optional resulting in error: "_SpecialForm" not callable
    message reported in issue #365, fixed the import in
    exceptions.py. Nice sleuthing by Iwan Aucamp and Dominic
    Davis-Foster, thank you! (Removed definitions of OptionalType,
    DictType, and IterableType and replaced them with
    typing.Optional, typing.Dict, and typing.Iterable throughout.)
  * Fixed typo in jinja2 template for railroad diagrams, thanks for
    the catch Nioub (issue #388).
  * Removed use of deprecated pkg_resources package in railroad
    diagramming code (issue #391).
  * Updated bigquery_view_parser.py example to parse examples at
    https://cloud.google.com/bigquery/docs/reference/legacy-sql
- Release 3.0.8
  * API CHANGE: modified pyproject.toml to require Python version
    3.6.8 or later for pyparsing 3.x. Earlier minor versions of 3.6
    fail in evaluating the version_info class (implemented using
    typing.NamedTuple). If you are using an earlier version of
    Python 3.6, you will need to use pyparsing 2.4.7.
  * Improved pyparsing import time by deferring regex pattern
    compiles. PR submitted by Anthony Sottile to fix issue #362,
    thanks!
  * Updated build to use flit, PR by Michał Górny, added
    BUILDING.md doc and removed old Windows build scripts - nice
    cleanup work!
  * More type-hinting added for all arithmetic and logical operator
    methods in ParserElement. PR from Kazantcev Andrey, thank you.
  * Fixed infix_notation's definitions of lpar and rpar, to accept
    parse expressions such that they do not get suppressed in the
    parsed results. PR submitted by Philippe Prados, nice work.
  * Fixed bug in railroad diagramming with expressions containing
    Combine elements. Reported by Jeremy White, thanks!
  * Added show_groups argument to create_diagram to highlight
    grouped elements with an unlabeled bounding box.
  * Added unicode_denormalizer.py to the examples as a
    demonstration of how Python's interpreter will accept Unicode
    characters in identifiers, but normalizes them back to ASCII so
    that identifiers print and 𝕡𝓻ᵢ𝓃𝘁 and 𝖕𝒓𝗂𝑛ᵗ are all
    equivalent.
  * Removed imports of deprecated sre_constants module for catching
    exceptions when compiling regular expressions. PR submitted by
    Serhiy Storchaka, thank you.
- Use python-base bundled pip as frontend for flit-core</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Split primary flavor in multibuild for possible inclusion into
  Ring0
- Remove hardcoded primary_python variable.</changelog>
  <changelog author="code@bnavigator.de" date="1663243200">- Fix incorrect usage of non-bundled pip revealed by
  python-rpm-macros update.</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- do primary/all split only for tumbleweed (similar to flit-core)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="8a427117f66329efc5790f0a696d0caae2feb363eb1adf86000298c8e7f0fb81" name="python-requests" arch="src">
  <version epoch="0" ver="2.31.0" rel="150400.6.12.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- add 5711.patch from upstream instead to remove idna&lt;3 pin</changelog>
  <changelog author="steven.kowalik@suse.com" date="1625140800">- Skip test_pyopenssl_redirect due to gh#psf/requests#5846</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 2.26.0:
  - `Session.send` now correctly resolves proxy configurations from both
    the Session and Request. Behavior now matches `Session.request`. (#5681)
  - Fixed a race condition in zip extraction when using Requests in parallel
    from zip archive. (#5707)
  - Instead of `chardet`, use the MIT-licensed `charset_normalizer` for Python3
    to remove license ambiguity for projects bundling requests.
  - Requests now supports `idna` 3.x on Python 3. `idna` 2.x will continue to
    be used on Python 2 installations. (#5711)
  - The `requests[security]` extra has been converted to a no-op install.
    PyOpenSSL is no longer the recommended secure option for Requests. (#5867)
  - Requests has officially dropped support for Python 3.5. (#5867)
- drop 5711.patch: upstream</changelog>
  <changelog author="steven.kowalik@suse.com" date="1635422400">- Correct {Build,}Requires for charset_normalizer.
- Add trustme to BuildRequires for the test suite.</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 2.27.0:
  * Officially added support for Python 3.10. (#5928)
  * Added a `requests.exceptions.JSONDecodeError` to unify JSON exceptions between
  Python 2 and 3. This gets raised in the `response.json()` method, and is
  backwards compatible as it inherits from previously thrown exceptions.
  Can be caught from `requests.exceptions.RequestException` as well. (#5856)
  * Improved error text for misnamed `InvalidSchema` and `MissingSchema`
  exceptions. This is a temporary fix until exceptions can be renamed
  (Schema-&gt;Scheme). (#6017)
  * Improved proxy parsing for proxy URLs missing a scheme. This will address
  recent changes to `urlparse` in Python 3.9+. (#5917)
  * Fixed defect in `extract_zipped_paths` which could result in an infinite loop
  for some paths. (#5851)
  * Fixed handling for `AttributeError` when calculating length of files obtained
  by `Tarfile.extractfile()`. (#5239)
  * Fixed urllib3 exception leak, wrapping `urllib3.exceptions.InvalidHeader` with
  `requests.exceptions.InvalidHeader`. (#5914)
  * Fixed bug where two Host headers were sent for chunked requests. (#5391)
  * Fixed regression in Requests 2.26.0 where `Proxy-Authorization` was
  incorrectly stripped from all requests sent with `Session.send`. (#5924)
  * Fixed performance regression in 2.26.0 for hosts with a large number of
  proxies available in the environment. (#5924)
  * Fixed idna exception leak, wrapping `UnicodeError` with
  `requests.exceptions.InvalidURL` for URLs with a leading dot (.) in the
  domain. (#5414)
  * Requests support for Python 2.7 and 3.6 will be ending in 2022. While we
  don't have exact dates, Requests 2.27.x is likely to be the last release
  series providing support.</changelog>
  <changelog author="michael@stroeder.com" date="1641384000">- update to 2.27.1
  * Fixed parsing issue that resulted in the auth component being
    dropped from proxy URLs. (#6028)</changelog>
  <changelog author="michael@stroeder.com" date="1656504000">- rebased requests-no-hardcoded-version.patch
- update to 2.28.1
  * 2.28.1 (2022-06-29)
  - Improvements
    + Speed optimization in iter_content with transition to yield from. (#6170)
  - Dependencies
    + Added support for chardet 5.0.0 (#6179)
    + Added support for charset-normalizer 2.1.0 (#6169)
  * 2.28.0 (2022-06-09)
  - Deprecations
    + warning Requests has officially dropped support for Python 2.7. warning (#6091)
    + Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091)
  - Improvements
    + Wrap JSON parsing issues in Request's JSONDecodeError for payloads
    without an encoding to make json() API consistent. (#6097)
    + Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)
    + Added provisional 3.11 support with current beta build. (#6155)
    + Requests got a makeover and we decided to paint it black. (#6095)
  - Bugfixes
    + Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable
    cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)
    + Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with
    requests.exceptions.SSLError for content and iter_content. (#6057)
    + Fixed issue where invalid Windows registry entires caused proxy resolution
    to raise an exception rather than ignoring the entry. (#6149)
    + Fixed issue where entire payload could be included in the error
    message for JSONDecodeError. (#6036)</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- requires python 3.7 or newer</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- allow using newest version of charset-normalizer (3.0+)
  * requests-allow-charset-normalizer-3.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 2.28.2:
  - Requests now supports charset\_normalizer 3.x.
  - Updated MissingSchema exception to suggest https scheme rather than http.
- drop requests-allow-charset-normalizer-3.patch (upstream)</changelog>
  <changelog author="david.anes@suse.com" date="1676548800">- Don't upper limit version of charset_normalized at runtime, too.
  * Added change to patch: requests-no-hardcoded-version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1683201600">- Update to 2.30.0:
  * Added support for urllib3 2.0. ￼
  * Defer chunked requests to the urllib3 implementation to improve
    standardization.
  * Relax header component requirements to support bytes/str subclasses.</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686571200">- Delete requests-no-hardcoded-version.patch
- Security Update to 2.31.0 (bsc#1211674):
  Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential
  forwarding of Proxy-Authorization headers to destination servers when
  following HTTPS redirects.
  When proxies are defined with user info (https://user:pass@proxy:8080), Requests
  will construct a Proxy-Authorization header that is attached to the request to
  authenticate with the proxy.
  In cases where Requests receives a redirect response, it previously reattached
  the Proxy-Authorization header incorrectly, resulting in the value being
  sent through the tunneled connection to the destination server. Users who rely on
  defining their proxy credentials in the URL are strongly encouraged to upgrade
  to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy
  credentials once the change has been fully deployed.
  Users who do not use a proxy or do not supply their proxy credentials through
  the user information portion of their proxy URL are not subject to this
  vulnerability.
  Full details can be read in our Github Security Advisory
  and CVE-2023-32681.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli (same as urllib3)</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)</changelog>
</package>
<package pkgid="59e9de9beb150bf9718b7d569549dfc243d6f2bd83480340d251a75fbf16113f" name="python-requests-oauthlib" arch="src">
  <version epoch="0" ver="1.3.1" rel="150400.12.7.1"/>
  <changelog author="mcihar@suse.cz" date="1383825600">- initial packaging</changelog>
  <changelog author="mcihar@suse.cz" date="1406116800">- Upgrade to 0.4.1:
  - New install target ``[rsa]`` for people using OAuth1 RSA-SHA1 signature
    method.
  - Fixed bug in OAuth2 where supplied state param was not used in auth url.
  - OAuth2 HTTPS checking can be disabled by setting environment variable
    ``OAUTHLIB_INSECURE_TRANSPORT``.
  - OAuth1 now re-authorize upon redirects.
  - OAuth1 token fetching now raise a detailed error message when the
    response body is incorrectly encoded or the request was denied.
  - Added support for custom OAuth1 clients.
  - OAuth2 compliance fix for Sina Weibo.
  - Multiple fixes to facebook compliance fix.
  - Compliance fixes now re-encode body properly as bytes in Python 3.
  - Logging now properly done under ``requests_oauthlib`` namespace instead
    of piggybacking on oauthlib namespace.
  - Logging introduced for OAuth1 auth and session.</changelog>
  <changelog author="prusnak@opensuse.org" date="1427371200">- updated to 0.4.2:
  - New ``authorized`` property on OAuth1Session and OAuth2Session,
    which allows you to easily determine if the session is already
    authorized with OAuth tokens or not.
  - New ``TokenMissing`` and ``VerifierMissing`` exception classes
    for OAuth1Session: this will make it easier to catch and identify
    these exceptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1485777600">update to version v0.7.0
  * Subclass requests.auth.AuthBase
  * Allow fetch_token to run through a proxy
  * Cleaning the previous token before fetching a new one, to avoid a
    TokenExpiredError
  * Adapts previous commit
  * Don't nullify token before refresh
  * oauthlib raises a different error from what we expect
  * Date for 0.4.2 release is added to HISTORY
  * v0.6.2
  * Adding Backend Application Flow documentation
  * v0.6.0
  * v0.6.1
  * opt in to Travis container infrastructure
  * minor fix to the previous commit
  * v0.7.0
  * Fix TypeError in TokenMissing class (call to parent)
  * Added authorization header for token access
  * Be more explicit about Travis installing unittest2
  * OAuth1 tests for authorized boolean
  * Only set default headers if headers are None
  * rst syntax fix
  * Google has changed OAuth 2.0 endpoints
  * Use client_id and client_secret as basic auth credentials if provided
  * Add installation instructions to docs index
  * Add **request_kwargs to fetch_request_token and fetch_access_token in
    oauth1_session to be passed to post-method of requests.session
  * Allow OAuth2 session request() to take client_id and client_secret
  * typo in error message
  * Add requests-mock to tox dependencies.
  * Prune .pyc files when creating a release
  * Update google.rst
  * Test 3.5 on Travis
  * Use unittest2 when it is installed
  * Completely remove username/password basic auth logic branch
  * Add setters/getters for client_id and access_token
  * Fix up line-length in note.
  * attach the entire response object when raising TokenRequestDenied
  * MailChimp compliance fixes that work around oauthlib issue #296
  * Allow explicit bypass of basic auth logic branch
  * Add imports for Legacy Application Flow docs
  * add license title
  * Need signedtoken extra for oauthlib dependency
  * Include import in Backend Application Flow docs
  * cleaning code and checking that a password was supplied along username
  * Update real_world_example.rst
  * Added tests for OAuth2 authorized boolean
  * Keep the username/password basic auth logic branch
  * Fix typo
  * [bugfix] Add headers in refresh_token flow
  * Setter/getter for self.token
  * Don't intercept HTTP errors before OAuthlib can handle them
  * Add tox.ini
  * Verify return value of OAuth2 response (#178)
  * Fix a problem that its get method always returns 'not_authed' on Slack
  * Update Legacy Application Flow documentation
  * Check if client exists before referencing client_id
  * Response objects should have cookies, not cookes
  * Preventing sending Basic Auth headers with "None:None"
  * Users should be able to override the token when using the Slack compliance
    fix
  * cleanup docstring of OAuth1Session to fix a typo/usage error
  * Allows tokens to be refreshed via a proxy
  * Add unittest2 test dependency for Python 2.6
  * Skip rsa tests when dependencies not met
  * fixed the layout of the note
  * Rename _refresh flag to withhold_token
  * Use requests-mock library, add tests for Slack compliance fix
  * Remove misleading README example.
  * added note to the real world example explaining its caveats
  * v0.5.0
  * making operator precedence more readable
  * When refreshing tokens, pass through **kwargs
- Use pypi.io as Source url</changelog>
  <changelog author="pousaduarte@gmail.com" date="1493208000">- Update to version 0.8.0:
  * Convert package to singlespec
  * Added Outlook Calender API example
  * Mentioned file to example.rst
  * Update google.rst
  * Allow OAuth2 session request() to take client_id and client_secret
  * Add requests-mock to tox dependencies.
  * Strips new lines in fetch_token  response body
  * Prefer user-supplied auth credentials.
  * add a fitbit compliance fix
  * test successful fitbit auth calls as well
  * v0.8.0</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Activate test suite, skipping three online tests
- Update to version 1.2.0
  * This project now depends on OAuthlib 3.0.0 and above.
  * Updated oauth2 tests to use 'sess' for an OAuth2Session instance instead
    of auth because OAuth2Session objects and methods acceept an auth
    paramether which is typically an instance of requests.auth.HTTPBasicAuth
  * OAuth2Session.fetch_token previously tried to guess how and where to
    provide "client" and "user" credentials incorrectly. This was
    incompatible with some OAuth servers and incompatible with breaking
    changes in oauthlib that seek to correctly provide the client_id.
    The older implementation also did not raise the correct exceptions when
    username and password are not present on Legacy clients.
  * Avoid automatic netrc authentication for OAuth2Session.
- from v1.1.0
  * Adjusted version specifier for oauthlib dependency
  * Dropped dependency on nose.
  * Minor changes to clean up the code and make it more readable/maintainable.
- from v1.0.0
  * Removed support for Python 2.6 and Python 3.3.
  * Added several examples to the documentation.
  * Added plentymarkets compliance fix.
  * Added a token property to OAuth1Session, to match the corresponding
    token property on OAuth2Session.</changelog>
  <changelog author="dmueller@suse.com" date="1583150400">- update to 1.3.0:
  * Instagram compliance fix
  * Added ``force_querystring`` argument to fetch_token() method on OAuth2Session</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632916800">- Use pytest to run the testsuite.</changelog>
  <changelog author="dmueller@suse.com" date="1644926400">- update to 1.3.1:
  * Add initial support for OAuth Mutual TLS (draft-ietf-oauth-mtls)
  * Add eBay compliance fix
  * Add Spotify OAuth 2 Tutorial
  * Add support for python 3.8, 3.9
  * Fixed LinkedIn Compliance Fixes
  * Fixed ReadTheDocs Documentation and sphinx errors
  * Moved pipeline to GitHub Actions</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649937600">- Remove unneeded BuildRequires on mock.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f54c2e85398a78d4b01a455b41f935627d6f45f84088bb3ba23956e8e99311e1" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="3f65fa4e4483774143cb39256aac760eb49542ee39c7bbdfc2c783d344abd6a0" name="python-scp" arch="src">
  <version epoch="0" ver="0.14.5" rel="150400.12.7.4"/>
  <changelog author="mardnh@gmx.de" date="1453464000">- initial package</changelog>
  <changelog author="mardnh@gmx.de" date="1471262400">- use python-setuptools instead of python-distribute</changelog>
  <changelog author="mardnh@gmx.de" date="1502020800">- Convert to singlespec</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1552478400">- Update to 0.13.1:
  * Guard against some malformed messages from the server
  * Remove all introspection logic for progress callback introduced in 0.12
  * progress callback only accept 3 arguments again
  * Introduce progress4 parameter which accepts the peername as 4th argument
  * Fix progress callback failing when it is an instance or class method
  * Fix README.rst for PyPI
  * Add possibility of getting the peer IP and port from the progress callback
  * Make putfo() work with file-like objects that don't provide getvalue()
  * Add putfo() method, allowing one to upload a file-like object
  * Add top-level get() and put() functions for convenience
  * Increase default socket time from 5 to 10 seconds</changelog>
  <changelog author="pgajdos@suse.com" date="1553515200">- version update to 0.13.2
  * Fix AssertionError in recursive get() when `_rename` is set and
    server sends a POPD at the end (`_depth &gt; 0`)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 0.13.3:
  - Fix hanging when underlying paramiko channel is closed</changelog>
  <changelog author="mardnh@gmx.de" date="1624968000">- Update to version 0.13.5
  * Fix extra space sent in SSH command-line for get(), causing
    issues on some servers.
- Update to version 0.13.4
  * Add scp_command attribute, allowing changing the command run
    on the server (for example to sudo scp)</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 0.13.6:
  * Fix put when the source directory has a trailing slash. It will now work
    similarly to rsync, copying the contents of the directory.</changelog>
  <changelog author="mardnh@gmx.de" date="1631361600">- Update to 0.14.1
  * Don't fail if 'pathlib' doesn't import (Python 2)
  * Accept 'unicode' objects as paths (Python 2)
- Update to 0.14.0
  * Accept iterables other than list and tuple in get() and put()
  * Accept pathlib.Path objects</changelog>
  <changelog author="mardnh@gmx.de" date="1631361601">- Run unittests
- Get tarball from github.com instead pythonhosted.org</changelog>
  <changelog author="mcepl@suse.com" date="1635681600">- Switch off the test suite (gh#jbardin/scp.py#167).</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- update to 0.14.2:
  * Don't fail if the remote path is a PurePath not a Path</changelog>
  <changelog author="dmueller@suse.com" date="1645531200">- update to 0.14.3:
  * Add type hints</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 0.14.4:
  * Update type hints for pyright</changelog>
  <changelog author="ecsos@opensuse.org" date="1688644800">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1689681600">- Update to 0.14.5:
  * Update docstrings to clarify sanitation and use of wildcards
  * Make sure to close the local file on errors</changelog>
</package>
<package pkgid="b8ab6ac1a7af474a6d6e7fa100ea8ccc99baf97deacbbdcf8ed915edd1ab2000" name="python-service_identity" arch="src">
  <version epoch="0" ver="23.1.0" rel="150400.8.7.1"/>
  <changelog author="jacobwinski@gmail.com" date="1437048000">- update to 14.0.0:
  * update spec file with new requirements per instructions by upstream
  * update spec file comment out no longer needed test fail workaround
  * upstream changes:
    + Switch to year-based version numbers.
    + Port to characteristic 14.0 (get rid of deprecation warnings).
    + Package docs with sdist.
-update to 1.0.0:
  * Backward-incompatible changes:
    + Drop support for Python 3.2. There is no justification to add complexity and unnecessary function calls for a Python version that nobody uses.
  * changes:
    + Move into the Python Cryptography Authority’s GitHub account.
    + Move exceptions into service_identity.exceptions so tracebacks don’t contain private module names.
    + Promoting to stable since Twisted 14.0 is optionally depending on service_identity now.
    + Use characteristic instead of a home-grown solution.
    + idna 0.6 did some backward-incompatible fixes that broke Python 3 support. This has been fixed now therefore service_identity only works with idna 0.6 and later. Unfortunately since idna doesn’t offer version introspection, service_identity can’t warn about it.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1437048001">- alphabetize BuildRequires &amp; Requires
- remove no longer needed commented out test fail workaround</changelog>
  <changelog author="jacobwinski@gmail.com" date="1437048002">- update pkg description to reflect upstream
- rm warnings in description about this pkg being alpha / possibly broken</changelog>
  <changelog author="nemysis@gmx.ch" date="1437480000">- Change URL
- Use %{oname} instead of service_identity
- Add BuildRequires for python-Sphinx for Documentation
- Change Description
- Change Documentation add index.html
- Add Man Page</changelog>
  <changelog author="jacobwinski@gmail.com" date="1464868800">- Update to 16.0.0:
  * Changes:
    +  Officially support Python 3.5.
    +  service_identity.SubjectAltNameWarning is now raised if the server certicate lacks a proper SubjectAltName. [#9]
    +  Add a __str__ method to VerificationError.
    +  Port from characteristic to its spiritual successor attrs.
  * Backward-incompatible changes:
    +  Python 3.3 and 2.6 aren't supported anymore. They may work by chance but any effort to keep them working has ceased.
    +  pyOpenSSL versions older than 0.14 are not tested anymore. They don't even build with recent OpenSSL versions.
- Update spec file with new upstream package requirements.</changelog>
  <changelog author="okurz@suse.com" date="1498910400">- Convert to singlespec</changelog>
  <changelog author="ecsos@opensuse.org" date="1537790400">- Update to 17.0.0:
  * Deprecations:
  - Since Chrome 58 and Firefox 48 both don’t accept certificates
    that contain only a Common Name, its usage is hereby
    deprecated in service_identity too. We have been raising
    a warning since 16.0.0 and the support will be removed in
    mid-2018 for good.
  * Changes:
  - When service_identity.SubjectAltNameWarning is raised, the
    Common Name of the certificate is now included in the warning
    message. #17
  - Added cryptography.x509 backend for verifying certificates.
    [#18]
  - Wildcards (*) are now only allowed if they are the leftmost
    label in a certificate. This is common practice by all major
    browsers. #19</changelog>
  <changelog author="tchvatal@suse.com" date="1537876800">- Drop some SLE11 code that is quite useless today</changelog>
  <changelog author="bwiedemann@suse.com" date="1538395200">- Reduce parallelism of sphinx-build
  to ensure reproducible builds (boo#1102408)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="hpj@urpla.net" date="1549281600">- add local-intersphinx-inventories.patch for generating the docs
  correctly
- add fetch-intersphinx-inventories.sh to fetch the inventories</changelog>
  <changelog author="toddrme2178@gmail.com" date="1551096000">- add fetch-intersphinx-inventories.sh to the sources</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551441600">- update to 18.1.0
- drop fetch-intersphinx-inventories.sh
- drop local-intersphinx-inventories.patch
- cleanup spec + enable tests
  * pyOpenSSL is optional now if you use service_identity.cryptography.* only.
  * Added support for iPAddress subjectAltNames.</changelog>
  <changelog author="tchvatal@suse.com" date="1578052800">- Format with spec-cleaner
- Upstream seems to rebase the tarball, refetch it</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1644235200">- Update to 21.1.0:
  - Python 3.4 is not supported anymore. It has been unsupported
    by the Python core team for a while now, its PyPI downloads
    are negligible, and our CI provider removed it as a supported
    option.
  - It's very unlikely that service-identity will break under 3.4
    anytime soon, which is why we do not block its installation
    on Python 3.4. But we don't test it anymore and will block it
    once someone reports breakage.
  - service_identity.exceptions.VerificationError can now be
    pickled and is overall more well-behaved as an exception.
    This raises the requirement of attrs to 19.1.0.
- This package actually truly requires six (it is expected to
  work with Python 2.7 as well).</changelog>
  <changelog author="mcepl@suse.com" date="1677240000">- Clean up the SPEC file.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="ecsos@opensuse.org" date="1687348800">- Update to 23.1.0
  * Removed
  - All Python versions up to and including 3.7 have been dropped.
  - Support for commonName in certificates has been dropped.
    It has been deprecated since 2017 and isn't supported by any
    major browser.
  - The oldest supported pyOpenSSL version (when using the
    pyopenssl backend) is now 17.0.0.
    When using such an old pyOpenSSL version, you have to pin
    cryptography yourself to ensure compatibility between them.
    Please check out contraints/oldest-pyopenssl.txt to verify
    what we are testing against.
  * Deprecated
  - If you've used service_identity.(cryptography|pyopenssl).extract_ids(),
    please switch to the new names extract_patterns(). #56
  * Added
  - service_identity.(cryptography|pyopenssl).extract_patterns()
    are now public APIs (FKA extract_ids()).
    You can use them to extract the patterns from a certificate
    without verifying anything. #55
  - service-identity is now fully typed. #57</changelog>
</package>
<package pkgid="afe8e1f8a7c1c7b7f0bcf722215c08be317b3ecb19cb7ba79c987d8374ffb4d4" name="python-sortedcontainers" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.8.7.4"/>
  <changelog author="toddrme2178@gmail.com" date="1418126400">- Initial version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475409600">- Update to 1.5.3
  * No upstream changelog</changelog>
  <changelog author="aloisio@gmx.com" date="1500120000">- Update to version 1.5.7
  * Changed ``SortedList.__setitem__`` to support slices with stop
    less than start and step equal one.
  1.5.6:
  * Changed ``SortedList.__setitem__`` to support slices that alias
    itself.
  1.5.5:
  * Changed ``SortedList.extend`` to support empty iterables.
  1.5.4:
  * Changed ``SortedList.__new__`` to call
    ``SortedListWithKey.__init__`` once instead of twice.
- Build HTML documentation and put it into -doc subpackage
- Enabled tests
- Converted to singlespec</changelog>
  <changelog author="arun@gmx.de" date="1512820800">- update to version 1.5.9:
  * Dropped CPython 2.6 testing.
- changes from version 1.5.8:
  * Bugfixes
    + Added SortedList.reverse to override MutableSequence.reverse and
    raise NotImplementedError.</changelog>
  <changelog author="arun@gmx.de" date="1525953600">- specfile:
  * update copyright year
- update to version 1.5.10:
  * Improved performance of islice(...) methods.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527681600">- Update to 2.0.2
  + API Changes
  * SortedListWithKey is deprecated. Use SortedKeyList instead.
    The name SortedListWithKey remains as an alias for SortedKeyList. The
    alias will be removed in Version 3.
  * sortedcontainers.sortedlist.LOAD has moved to
    SortedList.DEFAULT_LOAD_FACTOR so that derived classes can customize the
    value.
  * SortedList._half and SortedList._dual have been removed. Use
    SortedList._load instead.
  * SortedList.add parameter val renamed to value.
  * SortedList.__contains__ parameter val renamed to value.
  * SortedList.discard parameter val renamed to value.
  * SortedList.remove parameter val renamed to value.
  * SortedList.__delitem__ parameter idx renamed to index.
  * SortedList.__getitem__ parameter idx renamed to index.
  * SortedList.__setitem__ now raises :exc:NotImplementedError. Use
    SortedList.__delitem__ and SortedList.add instead.
  * SortedList.bisect_left parameter val renamed to value.
  * SortedList.bisect_right parameter val renamed to value.
  * SortedList.bisect parameter val renamed to value.
  * SortedList.count parameter val renamed to value.
  * SortedList.append now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.extend now raises :exc:NotImplementedError. Use
    SortedList.update instead.
  * SortedList.insert now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.pop parameter idx renamed to index.
  * SortedList.index parameter val renamed to value.
  * SortedList.__add__ parameter that renamed to other.
  * SortedList.__iadd__ parameter that renamed to other.
  * SortedList.__mul__ parameter that renamed to num.
  * SortedList.__imul__ parameter that renamed to num.
  * SortedList._make_cmp renamed to SortedList.__make_cmp.
  * SortedKeyList.add parameter val renamed to value.
  * SortedKeyList.__contains__ parameter val renamed to value.
  * SortedKeyList.discard parameter val renamed to value.
  * SortedKeyList.remove parameter val renamed to value.
  * SortedKeyList.bisect_left parameter val renamed to value.
  * SortedKeyList.bisect_right parameter val renamed to value.
  * SortedKeyList.bisect parameter val renamed to value.
  * SortedKeyList.count parameter val renamed to value.
  * SortedKeyList.append now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.extend now raises :exc:NotImplementedError. Use
    SortedKeyList.update instead.
  * SortedKeyList.insert now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.index parameter val renamed to value.
  * SortedKeyList.__add__ parameter that renamed to other.
  * SortedKeyList.__radd__ added.
  * SortedKeyList.__iadd__ parameter that renamed to other.
  * SortedKeyList.__mul__ parameter that renamed to num.
  * SortedKeyList.__rmul__ added.
  * SortedKeyList.__imul__ parameter that renamed to num.
  * Removed SortedDict.iloc. Use SortedDict.keys and
    SortedKeysView instead.
  * SortedDict.fromkeys parameter seq renamed to iterable.
  * SortedDict.keys now returns SortedKeysView.
  * SortedDict.items now returns SortedItemsView.
  * SortedDict.values now returns SortedValuesView.
  * Removed SortedDict.viewkeys. Use SortedDict.keys instead.
  * Removed SortedDict.viewitems. Use SortedDict.items instead.
  * Removed SortedDict.viewvalues. Use SortedDict.values instead.
  * SortedDict.iterkeys removed. Use SortedDict.keys instead.
  * SortedDict.iteritems removed. Use SortedDict.items instead.
  * SortedDict.itervalues removed. Use SortedDict.values instead.
  * SortedDict.popitem now accepts an optional index argument. Default
    `-1`.
  * sorteddict.KeysView renamed to SortedKeysView.
  * sorteddict.ItemsView renamed to SortedItemsView.
  * sorteddict.ValuesView renamed to SortedValuesView.
  * Sorted dict views rely on collections abstract base classes: dict views and
    sequence. The SortedKeysView.__getitem__,
    SortedItemsView.__getitem__, and SortedValuesView.__getitem__
    methods are implemented and optimized. All other mixin methods use the
    default implementation provided by the base class. Prefer SortedDict
    methods to view methods when possible.
  * SortedSet._make_cmp renamed to SortedSet.__make_cmp.
  * SortedSet.symmetric_difference parameter that renamed to other.
  * SortedSet.symmetric_difference_update parameter that renamed to
    other.
  + Miscellaneous
  * Sphinx autodoc now used for API documentation.
  * All benchmarks now run on CPython 3.6 unless otherwise noted.
  * Testing now uses pytest rather than nose.
  * AppVeyor CI testing added.
  * Updated versions of alternative implementations.
  * Rename Github repo from grantjenks/sorted_containers to
    grantjenks/python-sortedcontainers.
  * Fix broken links in documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 2.1.0:
  * Small updates to docs and tests for Python 3.7.
  * Change imports for Abstract Base Classes to collections.abc to avoid warnings in Python 3.7.
  * SortedDict methods iterkeys, iteritems, itervalues, viewkeys, viewitems, and viewvalues are not implemented for Python 2. Attribute lookup now raises :exc:`AttributeError`.
  * Accessing SortedDict.iloc will emit DeprecationWarning.
  * SortedSet.__rsub__ erroneously reversed its arguments. The method has been removed in favor of the inherited Set.__rsub__ which has a correct implementation.
  * :class:`SortedKeysView` and :class:`SortedValuesView` set-operations now return :class:`SortedSet` objects to better match the semantics of version 1.
- use github tarball for tests</changelog>
  <changelog author="dmueller@suse.com" date="1592136000">- update to 2.2.2
  * Add "small slice" optimization to SortedList.__getitem__.
  * Silence warning when testing SortedList.iloc.
  * Fix a warning regarding classifiers in setup.py.
  * Change SortedDict to avoid cycles for CPython reference counting.</changelog>
  <changelog author="tchvatal@suse.com" date="1597147200">- Switch to multibuild to avoid cycles with matplotib</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.3.0:
  * Make sort order stable when updating with large iterables.</changelog>
  <changelog author="code@bnavigator.de" date="1611316800">- Remove NumPy, SciPy, and Matplotlib requirement. They are not
  used in the regular test suite.
- no multibuild needed anymore</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 2.4.0:
  * Implement SortedDict methods: __or__, __ror__, and __ior__ per PEP 584.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="081d20069a002e8d7ea32746e561dcf28deaa720cda855ad6b626ae9817ffe36" name="python-tabulate" arch="src">
  <version epoch="0" ver="0.9.0" rel="150400.11.7.4"/>
  <changelog author="fcastelli@suse.com" date="1406203200">- Remove python-setuptools requirement</changelog>
  <changelog author="tbechtold@suse.com" date="1467806400">- Add LICENSE and README</changelog>
  <changelog author="sflees@suse.de" date="1492689600">- Update to 0.7.7
  * support. Iterables of dicts. ``latex_booktabs`` format.
  * ```fancy_grid`` and ``html`` formats. Command line utility.
  * ``--float`` format option for the command line utility.
  * New table formats (``psql``, ``jira``, ``moinmoin``, ``textile``).
  * Wide character support.
  * Printing from database cursors.
  * Option to print row indices.
  * Boolean columns. Ragged rows.
  * Option to disable number parsing.
  * Bug Fixes
- Convert to single spec</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1522065600">- Update to 0.8.2
  * Bugfix release
- Changes from 0.8.1
  * Multiline data in several output formats. New latex_raw format.
  * Column-specific floating point formatting.
  * Python 3.5 &amp; 3.6 support.
  * Drop support for Python 2.6, 3.2, 3.3 (should still work).
- Run spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Add python-setuptools to Requires</changelog>
  <changelog author="jayvdb@gmail.com" date="1549454400">- Update to 0.8.3
  * Bug fixes
  * New format: `github`
  * Custom colum alignment
- Recommend wcwidth needed for wide character support
- Suggest pandas which is supported
- Run tests for wcwidth and pandas</changelog>
  <changelog author="jengelh@inai.de" date="1549454401">- Use noun phrase in summary.</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Add pr_2.patch to fix tests to use sys.executable</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 0.8.5:
  * various bugfixes
- Remove merged pr_2.patch</changelog>
  <changelog author="arun@gmx.de" date="1575201600">- specfile:
  * be more specific in %files section
- update to version 0.8.6:
  * Bug fixes.
  * Stop supporting Python 3.3, 3.4.</changelog>
  <changelog author="dmueller@suse.com" date="1583841600">- remove pandas dependency (optional test dependency, and went python 3.x only)</changelog>
  <changelog author="arun@gmx.de" date="1587816000">- update to version 0.8.7:
  * Bug fixes.
  * New format: `pretty`.
  * HTML escaping.</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="pgajdos@suse.com" date="1610539200">- use %pytest macro</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 0.8.9:
  * Bug fix. Revert support of decimal separators.
  * Python 3.9 support, 3.10 ready.
  * New formats: ``unsafehtml``, ``latex_longtable``, ``fancy_outline``.
  * Support lists of UserDicts as input.
  * Support hyperlinks in terminal output.
  * Improve testing on systems with proxies.
  * Migrate to pytest.
  * Various bug fixes and improvements.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632916800">- Remove unneeded BuildRequires on nose.</changelog>
  <changelog author="arun@gmx.de" date="1657540800">- specfile:
  * update copyright year
- update to version 0.8.10:
  * Python 3.10 support.
  * Bug fixes.
  * Column width parameter.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1676548800">- update to version 0.9.0
  * Drop support for Python 2.7, 3.5, 3.6.
  * Migrate to pyproject.toml project layout (PEP 621).
  * New output formats: `asciidoc`, various `*grid` and `*outline` formats.
  * New output features: vertical row alignment, separating lines.
  * New input format: list of dataclasses (Python 3.7 or later).
  * Support infinite iterables as row indices.
  * Improve column width options.
  * Improve support for ANSI escape sequences and document the behavior.
  * Various bug fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1684497600">- build with setuptools_scm</changelog>
</package>
<package pkgid="83097d82159c82b61f640d80a94ec3686ee9873a2451de0226e4ce5cec02ef8d" name="python-threadpoolctl" arch="src">
  <version epoch="0" ver="2.1.0" rel="150300.3.2.1"/>
  <changelog author="pgajdos@suse.com" date="1583409600">- initial version 2.0.0, required by python-joblib</changelog>
  <changelog author="mcalabkova@suse.com" date="1595592000">- update to 2.1.0
  * New commandline interface: 'python -m threadpoolctl -i numpy'
    will try to import the `numpy` package and then return the output of
    `threadpoolctl.threadpool_info()` on STDOUT formatted using the JSON
    syntax. This makes it easier to quickly introspect a Python environment.
- Add patch python_executable.patch</changelog>
</package>
<package pkgid="9ed368e182ea2ca9758e0ee038bb966a837810bc78c34214663ec533684f1d3c" name="python-tk" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="5826057a1761659aad66a66da407fa80ee719e1a0350da272b312f4f14c11455" name="python-tk" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="974ec09664f5b53c900e9a951512095e9f8c1c84497f0366d9290584160ed0a6" name="python-tk" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="1a97d45f8a74e69cf0440fc70beb7972d412b89dde5e7e3cb426bdb566708b1a" name="python-tk" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="6e9dc78f5af663a9475fbac37924da5ae2ea5b47a3e180cc4e1ea6ad6cd3fc6c" name="python-tqdm" arch="src">
  <version epoch="0" ver="4.66.1" rel="150400.9.7.4"/>
  <changelog author="mmachova@suse.com" date="1610539200">- Update to 4.56.0
  * some tqdm.gui improvements
- Fix testsuite with pandas.patch</changelog>
  <changelog author="code@bnavigator.de" date="1612180800">- Simplify the rich supplements in the bash completions package</changelog>
  <changelog author="code@bnavigator.de" date="1613304000">- Update to 4.56.2
  * fix attribute errors when disabled (#1126)
  * add tests
- Changes in 4.56.1
  * fix repr() &amp; format_dict when disabled (#1113 &lt;- #624)
  * rename __repr__() =&gt; __str__()
  * minor documentation updates (#1113)
  * add &amp; update tests
- Test numpy only for non python36 flavor (Numpy 1.20 in TW dropped
  Python 3.6, NEP 29), tests are automatically skipped if not
  installed.
- Remove unused and untested python3 flavor BuildRequirements in
  test build: ipython, ipykernel
- Enhance IPython</changelog>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
</package>
<package pkgid="ef7ccd2cc6cb3aee7b1bece3be629ddf936d33b1cb63da4731948724fabf655e" name="python-tqdm" arch="src">
  <version epoch="0" ver="4.66.4" rel="150400.9.12.1"/>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1700827200">- Add patch sprinkle-in-timezone.patch:
  * Add a timezone to the call fromtimestamp()
- Switch to autosetup macro.
- Remove conditionals from some BuildRequires.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715083200">- Update to 4.66.4:
  * rich: fix completion (#1395 &lt;- #1306)
  * cli: eval safety (CVE-2024-34062, bsc#1223880)
  * pandas: add DataFrame.progress_map (#1549)
  * notebook: fix HTML padding (#1506)
  * keras: fix resuming training when verbose&gt;=2 (#1508)
  * fix format_num negative fractions missing leading zero (#1548)
  * fix Python 3.12 DeprecationWarning on import (#1519)
- Drop patch sprinkle-in-timezone.patch: Included upstream.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715947200">- Re-add conditionals to numpy/pandas, it is required.</changelog>
</package>
<package pkgid="535628951631ce249299de9f529dd58f61080a484162328d0be12db343afcfea" name="python-tqdm-bash-completion" arch="noarch">
  <version epoch="0" ver="4.66.1" rel="150400.9.7.4"/>
  <changelog author="mmachova@suse.com" date="1610539200">- Update to 4.56.0
  * some tqdm.gui improvements
- Fix testsuite with pandas.patch</changelog>
  <changelog author="code@bnavigator.de" date="1612180800">- Simplify the rich supplements in the bash completions package</changelog>
  <changelog author="code@bnavigator.de" date="1613304000">- Update to 4.56.2
  * fix attribute errors when disabled (#1126)
  * add tests
- Changes in 4.56.1
  * fix repr() &amp; format_dict when disabled (#1113 &lt;- #624)
  * rename __repr__() =&gt; __str__()
  * minor documentation updates (#1113)
  * add &amp; update tests
- Test numpy only for non python36 flavor (Numpy 1.20 in TW dropped
  Python 3.6, NEP 29), tests are automatically skipped if not
  installed.
- Remove unused and untested python3 flavor BuildRequirements in
  test build: ipython, ipykernel
- Enhance IPython</changelog>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
</package>
<package pkgid="588ce7d323a65de71b5c7fb922d9faece58f19a865d2dfced09da7a74b9804ae" name="python-tqdm-bash-completion" arch="noarch">
  <version epoch="0" ver="4.66.4" rel="150400.9.12.1"/>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1700827200">- Add patch sprinkle-in-timezone.patch:
  * Add a timezone to the call fromtimestamp()
- Switch to autosetup macro.
- Remove conditionals from some BuildRequires.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715083200">- Update to 4.66.4:
  * rich: fix completion (#1395 &lt;- #1306)
  * cli: eval safety (CVE-2024-34062, bsc#1223880)
  * pandas: add DataFrame.progress_map (#1549)
  * notebook: fix HTML padding (#1506)
  * keras: fix resuming training when verbose&gt;=2 (#1508)
  * fix format_num negative fractions missing leading zero (#1548)
  * fix Python 3.12 DeprecationWarning on import (#1519)
- Drop patch sprinkle-in-timezone.patch: Included upstream.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715947200">- Re-add conditionals to numpy/pandas, it is required.</changelog>
</package>
<package pkgid="7803b0da22a83b554264356872dc5912cbe066e13e473d7f3ebd830a5e70e688" name="python-websocket-client" arch="src">
  <version epoch="0" ver="1.5.1" rel="150400.13.7.1"/>
  <changelog author="toddrme2178@gmail.com" date="1502798400">- Update license to LGPL 3
- Fix rpmlint issues</changelog>
  <changelog author="tbechtold@suse.com" date="1503921600">- Fix build for Leap 42.3</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- properly provide/obsolete python3-websocket-client-test</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1516276800">- update to version 0.46.0 (shortened):
  - fixed invalid character (#379)
- update to version 0.45.0 (shortened):
  - change license to LGP v2.1
  - allow reuse of WebsocketApp.run_forever (#365)
  - Parse close frame response correctly when reason present (#354)
  - Wrap socket.gaierror with subclass of WebsocketException (#352)
  - Resolve a proxy issue and a connection error (#345)
  - Allow empty Host header value (#369)
  - Fix undefined variable (#347)
  - fix: getting a value with the key 'ca_certs' in sslopt dict (#326)
- Add use_system_cabundle.patch to use systems ca bundle file by default (bnc#1076519)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 0.54.0:
  * many fixes all around, see ChangeLog file
- Drop merged use_system_cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1555416000">- Update to 0.56.0:
  * Don't retry sockets with timeout set to 0(#536)
  * Add response headers in WebSocketBadStatusException (#501)
  * Manually assigning WebSocket-Version (#506)
  * SSL socket handling fix (#474)
  * Let setup.py use the same license as LICENSE file (#517)
  * Ensure that "timeout" is passed down, when calling WebSocket.connect() (#513)
  * Retry connect on "Interrupted system call" (#528)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580990400">- update to 0.57.0
  * wsdump: Fix --headers option
  * Fix getting 400 bad request with long proxy authorization string
  * Create dummy `ssl` object
  * Show compressed text messages in wsdump.py
  * Expose http connection header to user
  * fix the compatible issue with gevent+dnspython
  * _handshake: hasattr checks on six before accessing the values</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1619697600">- remove RHEL 7 compatibility from specfile
- update to version 0.58.0:
  - fix callback
  - Capitalize default connection header
  - Fix None.lower() when sec-websocket-protocol response header does notexist
  - Fix for #516
  - Tweak Python 3.4 build settings
  - fix callback
  - Fix None.lower() when sec-websocket-protocol response header doesn't exist
  - Create README.md and fix minor typo (both from existing pull requests)
  - Fix _handshake.py error where subproto is None
  - fix documentation: create_connection, settimeout
  - Capitalize default connection header
  - Edit README.md for clarification and to add missing material from parent repo
  - Fix minor typo - getdefauttimeout to getdefaulttimeout
  - Remove README text copied from fork that is not applicable
  - Add support for Python 3.8 and 3.9 (#596)
  - Fix a few minor typo/misspellings (#659)
  - Add pip command to README for 2nd dependency
  - Improve README code example formatting
  - Use thread.is_alive() to replace deprecated thread.isAlive() (#594)
  - Add first draft of Sphinx documentation
  - Edit README.md to include docs links and badges
  - Replace README.md FAQ with link to documentation FAQ page
  - Add acknowledgements section to README.md
  - Add detail to Autobahn testing README (still needs improvement)
  - Add autobahn test report and additional test instructions
  - Add sample connection code to example docs page
  - Fixes #631
  - Improve documentation, mostly new examples but some code comment upgrades
  - Add suppress origin example to documentation
  - Add FAQ advice to ping server
  - 'ping_interval' should be less than 'ping_timeout' (#611)
  - Allow optional, not mandatory, argument for pong() in WebSocket
  - Add basic ping/pong and HTTP proxy documentation and examples
  - Properly revert _app.py callback to state before PR #442 (previously only partially reverted)
  - Add timeout examples to documentation
  - Edit documentation to clarify timeout can be int or float (#654)
  - Reshuffle and enhance documentation
  - Fix #526 by reverting invalid BSD license migration in commit e94ed9e to return to LGPL2.1
  - Fix #526 by reverting invalid BSD license migration in commit e94ed9e to return to LGPL2.1
  - Fix #546 by removing comments introduced by PR #513
  - Update contribution guidelines
  - Revert PR #611
  - Replace deprecated assertEquals() with assertEqual()
  - The plural 'assertEquals()' is deprecated in Python 3 and triggers a warning
  - during CI:
  - https://docs.python.org/3/library/unittest.html#deprecated-aliases</changelog>
  <changelog author="schubi@suse.de" date="1629806400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649764800">- Update to version 1.3.2
  * Add support for pre-initialized stream socket in new WebSocketApp (#804)
  * Remove rel.saferead() in examples (f0bf03d)
  * Increase scope of linting checks (dca4022)
  * Start adding type hints (a8a4099)
- from version 1.3.1
  * Fix 10 year old bug and improve dispatcher handling
    for run_forever (#795)
  * Fix run_forever to never return None, only
    return True or False, and add two tests (#788)
  * Remove Python 3.6 support, EOL in Dec 2021
- from version 1.3.0
  * BREAKING: Set Origin header to use https:// scheme
    when wss:// WebSocket URL is passed (#787)
  * Replace deprecated/broken WebSocket URLs with working ones (6ad5197)
  * Add documentation referencing rel for automatic
    reconnection with run_forever()
  * Add missing opcodes 1012, 1013 (#771)
  * Add errno.ENETUNREACH to improve error handling (da1b050)
  * Minor documentation improvements and typo fixes
- from version 1.2.3
  * Fix broken run_forever() functionality (#769)
- from version 1.2.2
  * Migrate wsdump script in setup.py from scripts to newer entry_points (#763)
  * Add support for ssl.SSLContext for arbitrary SSL parameters (#762)
  * Remove keep_running variable (#752)
  * Remove HAVE_CONTEXT_CHECK_HOSTNAME variable (dac1692)
  * Replace deprecated ssl.PROTOCOL_TLS with ssl.PROTOCOL_TLS_CLIENT (#760)
  * Simplify code and improve Python 3 support (#751, #750, #746)
  * Fill default license template fields (#748)
  * Update CI tests
  * Improve documentation (#732, #733, #734, #737, #766, #768)
- from version 1.2.1
  * Fix python-socks dependency issue mentioned in #728
  * Replace echo.websocket.org with a local websockets
    echo server for unit tests (4951de2)
- from version 1.2.0
  * Fix #697, #665: Transition from LGPL 2.1 license to Apache 2.0 license
  * Revert #417 and reimplement SOCKS proxy support with
    python-socks instead of PySocks (fbcbd43)
- from version 1.1.1
  * Fix #377: increase exception verbosity in _app.py callback exception
  * Fix #717: race condition during connection close
  * Fix #722: improve handling where credentials include symbols like @
  * Fix #711: improve handling if ssl is None
- from version 1.1.0
  * Set enable_multithread to True by default (beb135a)
  * Performance improvement in _mask() function (287970e, #433)
  * Performance improvement in recv_strict() function (60e4711, #255)
  * Performance improvement by removing numpy-related code (a462d45)
  * Support uppercase no_proxy, http_proxy, https_proxy env vars (150df4f, #700)
  * Add sslopt 'server_hostname' support (#698)
  * Replace deprecated ssl.PROTOCOL_SSLv23 with ssl.PROTOCOL_TLS (494564f)
  * Update documentation, README (7c9d604, #704)
- from version 1.0.1
  * Fix exception handling bug #694
- from version 1.0.0
  * Removed Python 2 code, now only Python 3 compatible (d45343b, b7c5733, ff67af8)
  * Use semver for release versions, unlike breaking release 0.58.0 (#669)
  * Enhance enableTrace output (13e83b4)
  * Improve unit tests to over 80% code coverage (1679ab0, a00dd2d, etc.)
  * Fix old _app.py close status code bug (resulted in on_close() requiring 3 args) (#686)
  * Replace select import with selectors (#568)
- from version 0.59.0
  * Last main release to support Python 2
  * Fix Python 2 urlparse scheme (#332)
  * Add support for headers with multiple values (#627)
  * Add debug support for reserved custom status codes (#639)
  * Allow multiple Set-Cookie: headers (#649)
  * Simplified cookie sorting (#662)
  * Add no_proxy support (#671)
  * Add Host header to HTTP proxy request (#677)
  * Improve PEP8 style compliance (dc3f5c4)
- Drop support for Python2 which was removed upstream
- Rename README.rst to README.md in %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="yarunachalam@suse.com" date="1665489600">- Update to version 1.4.1
  - Fix stack growth bug when `run_forever` reconnects (#854)
  - Add doctest CI for sphinx docs code examples (d150099)
  - General docs improvements</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 1.4.2
  - create_dispatcher is determined by URL ws/wss, NOT by presence of sslopt args, to maintain consistency (#875)
  - Remove redundant key generation line (#864)
  - Updated docs to fix old links and updated CI to include Python 3.11</changelog>
  <changelog author="pgajdos@suse.com" date="1668427200">- python-six is not required</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683720000">- update to 1.5.1:
  * Fix logic bug that can cause disconnects
  * Refactor and improve ping/pong logic to resolve several
    issues, including an infinite loop issue during reconnect
  * Fix issue where `skip_utf8_validation = True` is ignored
  * Fix issue where sslopt `is_ssl` is ignored
  * Downgrade "websocket connected" message from logging.warning
    to logging.info</changelog>
</package>
<package pkgid="d8466e7f0adf4fa0a61a2f418e254cf270c6a57c8e021dc24158ad09e6c3347c" name="python-wrapt" arch="src">
  <version epoch="0" ver="1.15.0" rel="150400.12.7.1"/>
  <changelog author="hpj@urpla.net" date="1415102400">- version 1.9: initial build</changelog>
  <changelog author="michael@stroeder.com" date="1455624000">- update to 1.10.6</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version 1.10.8
  * Increment version to 1.10.8.
  * Fix modulo operator on ObjectProxy
  * Increment version to 1.10.7.
  * Document mod operator bug in Python variant of object proxy.
  * Update copyright year.
  * Fix tests for floordiv and mod.
  * Remove reference to inspect.getargspec() as removed in Python 3.6. #64
- Use pypi.io as Source url</changelog>
  <changelog author="jmatejek@suse.com" date="1488196800">- update for singlespec</changelog>
  <changelog author="adrian@suse.de" date="1499601600">- update to version 1.10.10:
  * Added back missing description and categorisations when releasing
  to PyPi.
  * Code for inspect.getargspec() when using Python 2.6 was missing
  import of sys module.</changelog>
  <changelog author="tchvatal@suse.com" date="1552305600">- Update to 1.11.1:
  * Many bugfixes all around
  * see changes.rst for detailed list
- Switch to github to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.11.2:
  * Fix possible crash when garbage collection kicks in when invoking a destructor of wrapped object.</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 1.12.0:
  * Provided that you only want to support Python 3.7, when deriving from
    a base class which has a decorator applied to it, you no longer need
    to access the true type of the base class using ``__wrapped__`` in
    the inherited class list of the derived class.
  * When using the ``synchronized`` decorator on instance methods of a
    class, if the class declared special methods to override the result for
    when the class instance was tested as a boolean so that it returned
    ``False`` all the time, the synchronized method would fail when called.
  * When using an adapter function to change the signature of the decorated
    function, ``inspect.signature()`` was returning the wrong signature
    when an instance method was inspected by accessing the method via the
    class type.</changelog>
  <changelog author="dmueller@suse.com" date="1584360000">- update to 1.12.1:
  * Applying a function wrapper to a static method of a class using the
  ``wrap_function_wrapper()`` function, or wrapper for the same, wasn't
  being done correctly when the static method was the immediate child of
  the target object. It was working when the name path had multiple name
  components. A failure would subsequently occur when the static method
  was called via an instance of the class, rather than the class.</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- Fix python3.6 build with pytest 6
  * fix-dummy-collector-pytest6.patch
  * gh#GrahamDumpleton/wrapt#168</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Fix python39 test suite failures
  * wrapt-pr161-py39tests.patch
  * gh#GrahamDumpleton/wrapt#161</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 1.13.2:
  * Note that the next signficant release of `wrapt` will drop support for
    Python 2.7 and Python 3.5.
  * Fix Python version constraint so PyPi classifier for ``pip`` requires
    Python 2.7 or Python 3.5+.
  * When a reference to a class method was taken out of a class, and then
    wrapped in a function wrapper, and called, the class type was not being
    passed as the instance argument, but as the first argument in args,
    with the instance being ``None``. The class type should have been passed
    as the instance argument.
  * If supplying an adapter function for a signature changing decorator
    using input in the form of a function argument specification, name lookup
    exceptions would occur where the adaptor function had annotations which
    referenced non builtin Python types. Although the issues have been
    addressed where using input data in the format usually returned by
    ``inspect.getfullargspec()`` to pass the function argument specification,
    you can still have problems when supplying a function signature as
    string. In the latter case only Python builtin types can be referenced
    in annotations.
  * When a decorator was applied on top of a data/non-data descriptor in a
    class definition, the call to the special method ``__set_name__()`` to
    notify the descriptor of the variable name was not being propogated. Note
    that this issue has been addressed in the ``FunctionWrapper`` used by
    ``@wrapt.decorator`` but has not been applied to the generic
    ``ObjectProxy`` class. If using ``ObjectProxy`` directly to construct a
    custom wrapper which is applied to a descriptor, you will need to
    propogate the ``__set_name__()`` call yourself if required.
  * The ``issubclass()`` builtin method would give incorrect results when used
    with a class which had a decorator applied to it. Note that this has only
    been able to be fixed for Python 3.7+. Also, due to what is arguably a
    bug (https://bugs.python.org/issue44847) in the Python standard library,
    you will still have problems when the class heirarchy uses a base class
    which has the ``abc.ABCMeta`` metaclass. In this later case an exception
    will be raised of ``TypeError: issubclass() arg 1 must be a class``.
- drop fix-dummy-collector-pytest6.patch, wrapt-pr161-py39tests.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.13.3:
  * Adds wheels for Python 3.10 on PyPi and where possible also now
  generating binary wheels for ``musllinux``.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.14.1:
  * When the post import hooks mechanism was being used, and a Python package with
    its own custom module importer was used, importing modules could fail if the
    custom module importer didn't use the latest Python import hook finder/loader
    APIs and instead used the deprecated API. This was actually occurring with the
    `zipimporter` in Python itself, which was not updated to use the newer Python
    APIs until Python 3.10.
  * *Bugs Fixed**
  * Python 3.11 dropped ``inspect.formatargspec()`` which was used in creating
    signature changing decorators. Now bundling a version of this function
    which uses ``Parameter`` and ``Signature`` from ``inspect`` module when
    available. The replacement function is exposed as ``wrapt.formatargspec()``
    if need it for your own code.
  * When using a decorator on a class, ``isinstance()`` checks wouldn't previously
    work as expected and you had to manually use ``Type.__wrapped__`` to access
    the real type when doing instance checks. The ``__instancecheck__`` hook is
    now implemented such that you don't have to use ``Type.__wrapped__`` instead
    of ``Type`` as last argument to ``isinstance()``.
  * Eliminated deprecation warnings related to Python module import system, which
    would have turned into broken code in Python 3.12. This was used by the post
    import hook mechanism.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 1.15.0:
  * When the C extension for wrapt was being used, and a property
    was used on an object proxy wrapping another object to intercept
    access to an attribute of the same name on the wrapped object,
    if the function implementing the property
    raised an exception, then the exception was ignored and not
    propagated back to the caller.
  * Address issue where the post import hook mechanism of wrapt
    wasn't transparent and left the __loader__ and __spec__.loader
    attributes of a module as the wrapt import hook loader and
    not the original loader.
  * Address issues where a thread deadlock could occur within the
    wrapt module import handler, when code executed from a post
    import hook created a new thread and code executed in the
    context of the new thread itself tried to register a post
    import hook, or imported a new module.
  * When using ``CallableObjectProxy`` as a wrapper for a type or
    function and calling the wrapped object, it was not possible
    to pass a keyword argument named ``self``.</changelog>
</package>
<package pkgid="37bbd2b2ceb0f4d3216343face6c78948486e302369422224f5e99d091fdce42" name="python-xml" arch="aarch64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="4ab7bba95a66680c8d22cb6f8a8167220caba3c4e6db137a9f67f0c7f819505c" name="python-xml" arch="ppc64le">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="53434752a25ee628a34e7dc72cb66f107ef105747f0d32e943f832c7a5a45bbc" name="python-xml" arch="s390x">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="d3c2705e706b6bf3ec949284e20981189c287a63bc35d3854b77b1810442d954" name="python-xml" arch="x86_64">
  <version epoch="0" ver="2.7.18" rel="150000.65.1"/>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678104000">- SLE-12 builds nis.so as well.</changelog>
  <changelog author="mcepl@suse.com" date="1678276800">- Enable --with-system-ffi for non-standard architectures.</changelog>
  <changelog author="mcepl@suse.com" date="1684929600">- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
  the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)</changelog>
  <changelog author="mcepl@suse.com" date="1685361600">- The condition around libnsl-devel BuildRequires is NOT
  switching off NIS support on SLE &lt; 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built</changelog>
  <changelog author="mcepl@suse.com" date="1686139200">- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694520000">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@suse.com" date="1694692800">- (bsc#1214685, CVE-2022-48565) Add
  CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.
- Remove BOTH CVE-2023-27043-email-parsing-errors.patch and
  Revert-gh105127-left-tests.patch (as per discussion on
  bsc#1210638).</changelog>
  <changelog author="mcepl@suse.com" date="1694865600">- (bsc#1214691, CVE-2022-48566) Add
  CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.
- Allow nis.so for SLE-12.</changelog>
  <changelog author="mcepl@cepl.eu" date="1701086400">- Add CVE-2022-48560-after-free-heappushpop.patch fixing
  use-after-free in Python via heappushpop in heapq (bsc#1214675,
  CVE-2022-48560).
- switch from %patchN style to the %patch -P N one.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1704715200">- Add CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1709640000">- Build with -std=gnu89 to build correctly with gcc14, bsc#1220970</changelog>
  <changelog author="mcepl@cepl.eu" date="1710763200">- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306)</changelog>
  <changelog author="mcepl@cepl.eu" date="1713268800">- Modify CVE-2023-27043-email-parsing-errors.patch to fix the
  unicode string handling in email.utils.parseaddr()
  (bsc#1222537).
- Revert CVE-2022-48560-after-free-heappushpop.patch, the fix was
  unneeded.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715428800">- Switch to using the system libexpat (bsc#1219559,
  CVE-2023-52425)
- Make sure to remove all embedded versions of other packages
  (including expat).
- Add CVE-2023-52425-libexpat-2.6.0-remove-failing-tests.patch
  removing failing test fixing bpo#3151, which we just not
  support.
- Remove patches over those embedded packages (cffi):
  - python-2.7-libffi-aarch64.patch
  - sparc_longdouble.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716033600">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).</changelog>
</package>
<package pkgid="19a2c384f495f8ebaf678b9b6d9924a3d0a3b4a1ec280563ea325e98d5daa509" name="python-yarl" arch="src">
  <version epoch="0" ver="1.9.2" rel="150400.8.7.4"/>
  <changelog author="arun@gmx.de" date="1519473600">- update to version 1.1.1:
  * Fix performance regression: don’t encode enmpty netloc (#170)</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Raise multidict requirement to match up setup.py</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551614400">- update to 1.3.0
  * Fix annotations for query parameter
  * An incoming query sequence can have int variables
  * Add URL.explicit_port property
  * Give a friendlier error when port cant be converted to int
  * bool(URL()) now returns False
  * Fix annotations for build
  * Fix annotations for cached_property
  * Accept str subclasses in URL constructor
  * Forbid inheritance, replace __init__ with __new__
  * Support PEP-561 (provide type hinting marker)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580731200">- update to 1.4.2
  * Workaround for missing str.isascii() in Python 3.6
  * Distinguish an empty password in URL from a password not provided at all
  * Fixed annotations for optional parameters of URL.build
  * Use None as default value of user parameter of URL.build
  * Enforce building C Accelerated modules when installing from source tarball,
    use YARL_NO_EXTENSIONS environment variable for falling back to (slower)
    Pure Python implementation
  * Fix quoting of plus in path by pure python version
  * Don't create a new URL if fragment is unchanged
  * Included in error msg the path that produces starting slash forbidden error
  * Skip slow IDNA encoding for ASCII-only strings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 1.5.0
- fix tests
  * Convert host to lowercase on URL building. #386
  * Allow using mod operator (%) for updating query string (an alias for update_query() method)
  * Allow use of sequences such as list and tuple in the values of a mapping
  such as dict to represent that a key has many values:
    url = URL("http://example.com")
    assert url.with_query({"a": [1, 2]}) == URL("http://example.com/?a=1&amp;a=2")
  * Support URL.build() with scheme and path (creates a relative URL)
  * Cache slow IDNA encode/decode calls
  * Add @final / Final type hints
  * Support URL authority/raw_authority properties and authority argument
  of URL.build() method
  * Hide the library implementation details, make the exposed public list very clean
  * Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+)
  * Fix a bug where query component, passed in a form of mapping or sequence,
  is unquoted in unexpected way
  * Hide Query and QueryVariable type aliases in __init__.pyi, now they
  are prefixed with underscore.
  * Keep ipv6 brackets after updating port/user/password.</changelog>
  <changelog author="code@bnavigator.de" date="1595937601">- remove c source file from package (rpmlint error)
- needs typing-extensions</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.6.0:
  - Allow for int and float subclasses in query, while still denying bool.
    `#492 &lt;https://github.com/aio-libs/yarl/issues/492&gt;`_
  - Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.
    `#502 &lt;https://github.com/aio-libs/yarl/issues/502&gt;`_
  - Keep IPv6 brackets in ``origin()``.
    `#504 &lt;https://github.com/aio-libs/yarl/issues/504&gt;`_</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.6.3:
  - No longer loose characters when decoding incorrect percent-sequences (like
    ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
  - Provide generated ``.c`` files in TarBall distribution.
  - ``human_repr()`` now always produces valid representation equivalent to the
    original URL (if the original URL is valid).
  - Fixed  requoting a single percent followed by a percent-encoded character
    in the Cython implementation.
  - Fix ValueError when decoding ``%`` which is not followed by two hexadecimal
    digits.
  - Fix decoding ``%`` followed by a space and hexadecimal digit.
  - Fix annotation of ``with_query()``/``update_query()`` methods for
    ``key=[val1, val2]`` case.</changelog>
  <changelog author="mcepl@suse.com" date="1614081600">- Add tests_overcome_bpo42967.patch to over effects of bpo#42967,
  which forbade mixing amps and semicolons in query strings as
  separators.</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Unset -Werror=return-type for python39
- Only install typing_extensions for Python &lt; 3.8</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- version update to 1.7.2
  - Changed call in ``with_port()`` to stop reencoding parts of the URL
  that were already encoded. (`#623 &lt;https://github.com/aio-libs/yarl/issues/623&gt;`_)
  - Add `__bytes__()` magic method so that `bytes(url)` will work and use optimal
  ASCII encoding. (`#582 &lt;https://github.com/aio-libs/yarl/issues/582&gt;`_)
  - Started shipping platform-specific arm64 wheels for Apple Silicon.
  (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Started shipping platform-specific wheels with the ``musl`` tag targeting typical
  Alpine Linux runtimes. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Added support for Python 3.10. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
- do not require pytest-runner for build, it is not needed</changelog>
  <changelog author="code@bnavigator.de" date="1660824000">- Update to 1.8.1
  * Added URL.raw_suffix, URL.suffix, URL.raw_suffixes,
    URL.suffixes, URL.with_suffix. (#613)
  * Dropped Python 3.6 support. (#672)
- Drop tests_overcome_bpo42967.patch</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.8.2
  * This is the first release that started shipping wheels for Python 3.11.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1673265600">- Add patch support-python-311.patch:
  * Skip a test under Python 3.11.</changelog>
  <changelog author="mcepl@suse.com" date="1677758400">- Refreshed support-python-311.patch: with fix
  of CVE-2023-24329 (bsc#1208471), the test
  test_url_parsing.TestScheme.test_not_a_scheme2 fails on all
  openSUSE/SLE Python interpreters.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to version 1.9.1
  * Marked tests that fail on older Python patch releases
  (&lt; 3.7.10, &lt; 3.8.8 and &lt; 3.9.2) as expected to fail due to missing
    a security fix for CVE-2021-23336. ((#850)_)
- Delete support-python-311.patch, not needed anymore</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Update to version 1.9.2
  Fix regression with truediv and absolute URLs with empty paths
  causing the raw path to lack the leading /. ((#854)_)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Add 882-sq_bracket_in_URL_netloc.patch fixing handling of
  square bracket handling in URL netloc (gh#aio-libs/yarl#876).</changelog>
</package>
<package pkgid="e2232509648818b78daa121f23a1d2d5e49633ce6faed60ff5499e0167cac424" name="python-zope.interface" arch="src">
  <version epoch="0" ver="6.0" rel="150400.12.7.4"/>
  <changelog author="okurz@suse.com" date="1489233600">- Convert package to singlespec</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Update to 4.4.2
  * Fix a regression storing zope.component.persistentregistry.PersistentRegistry instances. See issue 85.
  * Fix a regression that could lead to the utility registration cache of Components getting out of sync. See issue 93.
- Update to 4.4.1
  * Simplify the caching of utility-registration data. In addition to simplification, avoids spurious test failures when checking for leaks in tests with persistent registries. See pull 84.
  * Raise ValueError when non-text names are passed to adapter registry methods: prevents corruption of lookup caches.
- Update to 4.4.0
  * Avoid a warning from the C compiler. (https://github.com/zopefoundation/zope.interface/issues/71)
  * Add support for Python 3.6.
- Update to 4.3.3
  * Correct typos and ReST formatting errors in documentation.
  * Add API documentation for the adapter registry.
  * Ensure that the LICENSE.txt file is included in built wheels.
  * Fix C optimizations broken on Py3k. See the Python bug at: http://bugs.python.org/issue15657 (https://github.com/zopefoundation/zope.interface/issues/60)
- Update to 4.3.2
  * Fix equality testing of implementedBy objects and proxies. (https://github.com/zopefoundation/zope.interface/issues/55)
- Prevent duplicate doc package generation
- Cleanup duplicates in build tree</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cover building python3 packages as well</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Version update to 4.5.0:
  * Allow registering and unregistering instance methods as listeners. See issue 12 and PR 102.
  * Synchronize and simplify zope/__init__.py. See issue 114
  * Avoid exceptions when the __annotations__ attribute is added to interface definitions with Python 3.x type hints. See issue 98.
  * Fix the possibility of a rare crash in the C extension when deallocating items. See issue 100.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcalabkova@suse.com" date="1554465600">- update to version 4.6.0
  * Add support for Python 3.7
  * Fix verifyObject for class objects with staticmethods on Python 3.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1575892800">- update to 4.7.1:
  * Use Python 3 syntax in the documentation. See issue 119.
  * Drop support for Python 3.4.
  * Fix queryTaggedValue, getTaggedValue, getTaggedValueTags subclass
    inheritance. See PR 144.
  * Add support for Python 3.8.</changelog>
  <changelog author="pgajdos@suse.com" date="1584360000">- version update to 4.7.2
  - Remove deprecated use of setuptools features.  See `issue 30
    &lt;https://github.com/zopefoundation/zope.interface/issues/30&gt;`_.</changelog>
  <changelog author="pgajdos@suse.com" date="1585051200">- version update to 5.0.1
  * lot of changes, see CHANGES.rst</changelog>
  <changelog author="tchvatal@suse.com" date="1586865600">- Update to 5.1.0:
  * Make @implementer(*iface) and classImplements(cls, *iface) ignore redundant interfaces. If the class already implements an interface through inheritance, it is no longer redeclared specifically for cls. This solves many instances of inconsistent resolution orders, while still allowing the interface to be declared for readability and maintenance purposes. See issue 199.
  * Remove all bare except: statements. Previously, when accessing special attributes such as __provides__, __providedBy__, __class__ and __conform__, this package wrapped such access in a bare except: statement, meaning that many errors could pass silently; typically this would result in a fallback path being taken and sometimes (like with providedBy()) the result would be non-sensical. This is especially true when those attributes are implemented with descriptors. Now, only AttributeError is caught. This makes errors more obvious.
  * In addition, ZODB errors like POSKeyError could now be propagated where previously they would ignored by this package.
  * Require that the second argument (bases) to InterfaceClass is a tuple. This only matters when directly using InterfaceClass to create new interfaces dynamically. Previously, an individual interface was allowed, but did not work correctly. Now it is consistent with type and requires a tuple.
  * Let interfaces define custom __adapt__ methods. This implements the other side of the PEP 246 adaptation protocol: objects being adapted could already implement __conform__ if they know about the interface, and now interfaces can implement __adapt__ if they know about particular objects. There is no performance penalty for interfaces that do not supply custom __adapt__ methods.
  * Make the internal singleton object returned by APIs like implementedBy and directlyProvidedBy for objects that implement or provide no interfaces more immutable. Previously an internal cache could be mutated. See issue 204.</changelog>
  <changelog author="asn@cryptomilk.org" date="1612353600">- Update to version 5.2.0
  * Add documentation section ``Persistency and Equality``
  * Create arm64 wheels.
  * Add support for Python 3.9.
- Fix build on tumbleweed</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Don't switch off python36 build, half of python-* packages depend on it.</changelog>
  <changelog author="os@jacraig.com" date="1625832000">- Update to 5.4.0
  * many changes, see CHANGES.rst</changelog>
  <changelog author="pgajdos@suse.com" date="1634126400">- %check: use %pyunittest rpm macro
- added sources
  + _multibuild</changelog>
  <changelog author="yarunachalam@suse.com" date="1667044800">- Update to version 5.5.0
  * Add support for Python 3.10 and 3.11 (as of 3.11.0rc2).
  * Add missing Trove classifier showing support for Python 3.9.
  * Add some more entries to zope.interface.interfaces.__all__.
  * Disable unsafe math optimizations in C code. See pull request 262.</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 5.5.1
  * Add support for final Python 3.11 release.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670241600">- Update to version 5.5.2
  * Add support for building arm64 wheels on macOS.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 6.0:
  * Build Linux binary wheels for Python 3.11.
  * Drop support for Python 2.7, 3.5, 3.6.
  * Fix test deprecation warning on Python 3.11.
  * Add preliminary support for Python 3.12 as of 3.12a5.
  * Drop:
  * + `zope.interface.implements`
  * + `zope.interface.implementsOnly`
  * + `zope.interface.classProvides`</changelog>
</package>
<package pkgid="abffa44e7057e4ae46f8a0dcc3325a30576d1d98538b01f6cd221864959e9f2b" name="python3-bcc" arch="noarch">
  <version epoch="0" ver="0.29.1" rel="150600.5.3.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1627387200">- Update source URL for bcc and libbpf</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880000">- Update to 0.21.0
  + Support for kernel up to 5.13
  + support for debug information from libdebuginfod
  + finished support for map elements items_*_batch() APIs
  + add atomic_increment() API
  + support attach_func() and detach_func() in python
  + fix displaying PID instead of TID for many tools
  + new tools: kvmexit.py
  + new libbpf-tools: gethostlatency, statsnoop, fsdist and solisten
  + fix tools ttysnoop/readahead for newer kernels
  + doc update and bug fixes
- Update libbpf to 0.5
  + libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  + streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  + "Light" BPF skeleton support;
  + BPF_PROG_TYPE_SYSCALL support;
  + BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  + BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  + allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  + btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  + sk_reuseport/migrate program type support;
  + btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  + btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  + btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  + bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  + bpf_map_lookup_and_delete_elem_flags() API.
  + support for weak typed __ksym externs;
  + BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  + bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  + bpf_get_func_ip() helper;
  + bpf_sys_bpf() helper;
  + bpf_task_pt_regs() helper;
  + bpf_btf_find_by_name_kind() helper;
  + usability improvements for bpf_tracing.h when target architecture is missing.
  + improve BPF support detection on old Red Hat kernels with backported BPF patches;
  + improvements for LTO builds with GCC 10+;
  + pass NLM_F_EXCL when creating TC qdisc;
  + better support of BPF map reuse on old kernels;
  + fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1631880001">- Update to 0.22.0
  + Support for kernel up to 5.14
  + add ipv4/ipv6 filter support for tcp trace tools
  + add python interface to attach raw perf events
  + fix tcpstates for incorrect display of dport
  + new options for bcc tools runqslower, argdist
  + new libbpf-tools: filetop, exitsnoop, tcprtt
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633089600">- Use shared libbpf library instead of building it along with bcc
    + Delete libbpf-0.5.tar.gz
- Fix build on i586 due to use of shared libbpf library
    + Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1645012800">- Move kernel{,-devel} requirements to libbcc0 for deduplication.
- Require additionally kernel-$variant-devel for libbcc0.
- Declare python3-bcc, bcc-examples and bcc-docs as noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1650628800">- Update to version 0.24.0:
  + Support for kernel up to 5.16
  + bcc tools: update for trace.py, sslsniff.py, tcptop.py, hardirqs.py, etc.
  + new libbpf tools: bashreadline
  + allow specify wakeup_events for perf buffer
  + support BPF_MAP_TYPE_{INODE, TASK}_STORAGE maps
  + remove all deprecated libbpf function usage
  + remove P4/B language support
  + major test infra change, using github actions now
  + doc update, bug fixes and other tools improvement
- Changes from version 0.23.0:
  + Support for kernel up to 5.15
  + bcc tools: update for kvmexit.py, tcpv4connect.py, cachetop.py, cachestat.py, etc.
  + libbpf tools: update for update for mountsnoop, ksnoop, gethostlatency, etc.
  + fix renaming of task_struct-&gt;state
  + get pid namespace properly for a number of tools
  + initial work for more libbpf utilization (less section names)
  + doc update, bug fixes and other tools improvement
- Drop Do-not-export-USDT-function-when-ENABLE_USDT-is-OFF.patch:
  fixed upstream.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1660219200">- Update to version 0.25.0:
  + Support for kernel up to 5.19
  + bcc tool updates for oomkill.py, biolatpcts.py, sslsniff.py, tcpaccept.py, etc.
  + libbpf tool updates for klockstat, opensnoop, tcpconnect, etc.
  + new bcc tools: tcpcong
  + new libbpf tools: tcpsynbl, mdflush, oomkill, sigsnoop
  + usdt: support xmm registers as args for x64
  + bpftool as a submodule now
  + remove uses of libbpf deprecated APIs
  + use new llvm pass manager
  + support cgroup filtering libbpf tools
  + fix shared lib module offset &lt;-&gt; global addr conversion
  + riscv support
  + LoongArch support
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672315200">- Update to version 0.26.0:
  + Support for kernel up to 6.1
  + bcc tool updates for biosnoop, opensnoop, biopattern, killsnoop, runqslower, offcputime, wakeuptime, etc.
  + libbpf-tools updates for klockstat, sigsnoop, hardirqs, softirqs, opensnoop, statsnoop, offcputime, tcplife, cpufreq, cpudist, etc.
  + new libbpf-tools: tcptop, tcpstates, biotop, capable
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1673438400">- Force specific versioning of LLVM in preparation of Leap 15.5/SLES 15-SP5
  + Remove now duplicate dependency llvm-clang-devel, having clang-devel is enough</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695297600">- Disable bcc-lua until luajit issue is resolved
- Explicitly add python3-setuptools and zip as a build requirement
- Update to version 0.28.0
  + Support for kernel up to 6.3.
  + new libbpf tool: tcppktlat.
  + bcc tool updates: funcslower, wakeuptime, profile, offcputime, deadlock,
    funccount, argdist, kvmexit, runqlen and cpuunclaimed.
  + libbpf tool update: memleak, tcprtt, tcpconnlat, funclatency, syscount,
    cpufreq, biosnoop.
  + support ringbuf_query for bcc tools.
  + handle '[uprobes]' memory mapped file properly during stack tracing.
  + Fix maximum allowed index for print_linear_hist for bcc tools.
  + add module kfunc/kretfunc support.
  + clang rewriter: initialize only the requested parameters
  + filter with available_filter_functions to make multi-functions kprobes more
    robust for both bcc and libbpf tools.
  + doc update, other bug fixes and tools improvement
- Update to version 0.27.0
  + Support for kernel up to 6.2
  + bcc tool updates for ttysnoop, slabratetop, readahead, nfsslower, cpudist,
    cachetop, cachestat, etc.
  + libbpf-tools updates for mdflush, drsnoop, statsnoop, ttysnoop, softirqs,
    wakeuptime, cachestat, numamove, etc.
  + fix for incomplete static libraries
  + implement zip archive support
  + upgrade to use c++14 standard
  + new libbpf-tools: memleak
  + add loongarch support in libbpft-tools
  + doc update, bug fixes and other tools improvement</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695384000">- Mention boo#1215592 in spec file, which tracks the problem with luajit
  that require temporarily disabling bcc-lua</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1695643200">- Disable building of tests file
  + Remove zip from build requirements as it is no longer needed</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1697457600">- Re-enable bcc-lua now that boo#1215592 is resolved</changelog>
  <changelog author="steven.kowalik@suse.com" date="1701777600">- Remove unneeded Requires on python3-future.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1706270400">- Switch to LLVM 17
- Change LLVM version macro to the cleaner alternative suggested in
  SR#1134405
- Update to version 0.29.1
  * support for kernel up to 6.6.
  * new bcc tools: rdmaucma
  * bcc tool update: tcpstates, statsnoop, runqlat, bio tools,
    tcptop, slabratetop, tcprtt, etc.
  * doc update, other bug fixes and tools improvement, and some new
    enhancement for powerpc and riscv.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709035200">- Have the -devel package require llvm%{llvm_major_version}-devel:
  /usr/include/bcc/bpf_module.h:25:10 includes
  llvm/Config/llvm-config.h.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1710244800">- Update LLVM version macro to support SLE (bsc#1220746)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1711454400">- Update bcc-devel requirement to depend on specific version of llvm-devel</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1714737600">- Fix incorrect offset calculation when consecutive bitfields are
  present (bsc#1219096)
  * add fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
</package>
<package pkgid="7742d92571fc825dee7406b9526dacda88d5cdf8e967a2489b9a9b7e8627d1bf" name="python3-csp-billing-adapter" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="150400.9.14.1"/>
  <changelog author="sean.marlow@suse.com" date="1687953600">- Update to version v0.3.0
  + Add new exception type
  + Improved initial metering test exception handling
- Update to version 0.2.0
  + Split up `create_csp_config` into smaller components.
- Update to version 0.1.1
  + Fix retry on exception in the meter billing test.
  + Fix the timestamp in meter billing test call. This is
    a datetime object not a string timestamp.
- Update to version 0.1.0
  + Wait one cycle at startup before checking usage data
  + Dry run metering against API at startup
  + Sleep only for remainder of cycle to account for processing time.
  + Handle multiple errors using error list
  + Use cache and csp config in memory
  + Pass in now timestamp instead of re-generating
  + Save config map and cache once at end of loop
  + Add base product to csp config
  + Add timestamps to log messages
  + Add retry mechanism for functions that may fail randomly
- Update to version 0.0.2
  + Handle no matching dimension found for volume billing
  + Only load testing support plugins in unit tests
  + Add additional logging to core paths
  + Add Initial exception handling
- initial build</changelog>
  <changelog author="rjschwei@suse.com" date="1688385600">- Update to version 0.3.1
  + Add -service subpackage
  + systemd enablement to run the code as a daemon in a VM</changelog>
  <changelog author="sean.marlow@suse.com" date="1690891200">- Update to version 0.4.0
  + Handle status dictionary from meter billing and legacy string response.
  + Implement supported for tiered consumption reporting.</changelog>
  <changelog author="jesus.bv@suse.com" date="1692360000">- Fix python3-csp-billing-adapter dependency for service</changelog>
  <changelog author="rjschwei@suse.com" date="1692360001">- Update to version 0.5.0
  + Integrate log handling and log configuration</changelog>
  <changelog author="jesus.bv@suse.com" date="1695038400">- Update to version 0.6.0
  Update message when records list is empty
  Only sleep at initial deployment
  Skip invalid records
  Log format variables on a const</changelog>
  <changelog author="sean.marlow@suse.com" date="1695211200">- Update to version 0.7.0:
  * Add get version hook spec</changelog>
  <changelog author="sean.marlow@suse.com" date="1697457600">- Update to version 0.8.0:
  * Clear billing status with an empty dictionary</changelog>
  <changelog author="sean.marlow@suse.com" date="1705665600">- Update to version 0.9.0:
  * Add metering archive feature</changelog>
  <changelog author="sean.marlow@suse.com" date="1713873600">- Update to version 0.10.0:
  * Add free trial feature</changelog>
</package>
<package pkgid="66835f71aeffb0d69e4b9039643c291483b5df36c935405d71d71fb1e1217ac8" name="python3-docker" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1506686400">- update to 2.4.2:
  * Add 'verbose' option for network inspect api
  * Fix misleading build method docs
  * Add support for ContainerSpec.TTY
  * Standardize handling of verbose param in inspect_network
  * Fix volume path passed by run to create_container
  * Only pull the 'latest' tag when testing images
  * Fix test cases for ``runtime`` config
  * Update image create error parsing
  * Improve robustness of remove_network integration test
  * Bump 2.2.0, update changelog
  * fix: Missing exception handling in split_port when no container port
  * Replace erroneous networks argument in containers.run with singular
  * Fix passing volumes to run with no host path
  * Update check_resource decorator to account for new resource names
  * Include tag in images.get after pulling if provided separately
  * Fix APIError status_code property for client/server errors
  * Ensure default timeout is used by API Client
  * Add prune_containers method
  * Add xfail mark to storageopt test
  * APIClient implementation of plugin methods
  * Add support for max_failure_ratio and monitor in UpdateConfig
  * Add appveyor.yml config
  * excludes requests 2.18.0 from compatible versions
  * Add prune_volumes method
  * fix #1625 where ImageCollection.build() could return early with incorrect
    image_id depending on docer build output
  * Ignore socket files in utils.tar
  * Add `target` argument to image building
  * Sorts model attributes in api docs alphabetically
  * Rewrite the split_port function using re
  * Add stop_timeout to create_container
  * Move reload_config func into the APIClient
  * Fix ImageNotFound detection
  * Update dockerVersions
  * Add missing support for `CpusetMems` parameter to HostConfig.
  * Implement cachefrom
  * Fix typo s/CpuSetCpus/CpusetCpus/
  * Add upgrade_plugin method
  * Handle multiple success messages during image building.
  * Add support for start_period in Healthcheck spec
  * Bump 2.0.2
  * removed duplicate mem_limit arg desc; type now consistent accross
    models (float-&gt;int)
  * added integration test for #1625 for ImageCollection.build() that verfies
    that the build method uses the last success message for extracting the image id
  * Allow events daemon command to read config.json
  * update docker-py test status code from 500 to 400
  * Adds a 'labels' property to the container model
  * Add support for recursive wildcard pattern in .dockerignore
  * Add missing secrets doc
  * init_path removed in Engine 17.05
  * Add prune_images method
  * Set infinite timeout for the `events` method
  * check NoneType before using
  * 2.3.0-dev
  * Add attributes for pickling
  * Allow configuring API version for integration test with env var
  * Correct the description of dns_opt option of create_container
  * Add support for ingress in create_network
  * DockerClient.secrets should be a @property
  * Adds a 'labels' property to the image model
  * Raise an error when passing an empty string to split_port
  * fix can't get a dict when Containers is None
  * new integration task linting for #1625
  * Adds an 'image' property to the container model
  * Add service_logs command to APIClient and logs command to models.Service
  * Fixed events command related unit tests by passing a timeout value
  * Compose 1.14.0 hack
  * Add service_logs integration test
  * Network model functions 'connect' and 'disconnect' did not accept or
    passthrough keyword arguments.
  * Modernize exec_api.py
  * Fix docstring of ImageCollection.get
  * removed unused/typoed param from models.containers.list docstring
  * Bump version 2.1.0
  * Plugins API documentation
  * Move default `timeout` into `from_env`
  * Fix _post_json behavior
  * Add prune_networks method
  * Allow port range like 8000-8010:80
  * Bump 2.3.0
  * Reference new methods in docs
  * Use experimental engine for testing in Jenkins/Makefile
  * update swarm remove test status code from 500 to &gt;= 400
  * Bump dev version
  * Update services.py
  * Add support for volume_driver in HostConfig
  * Add support for auto_remove in HostConfig
  * Add 'force' parameter in remove_volume
  * passing flake8 test
  * Add a reload_config function to the DaemonApiMixin
  * Closes #1588, image.tag does not return anything
  * Add df method
  * Convert mode argument to valid structure in create_service
  * Fix test issues
  * Add cpu_count, cpu_percent, cpus parameters to container HostConfig.
  * Add cachefrom to build docstring
  * Improve build result detection
  * Documentation fixes for login func
  * Add integration tests
  * Add ContainerSpec mounts test
  * Add create_plugin implementation
  * Remove integration test for APIClient.search method
  * Make sure data is written in prune test so space can be reclaimed
  * Add ability to set 'Hostname' on a Service.
  * fix type checking for nano_cpus
  * Remove duplicate line in exec_run documentation
  * Optional name on VolumeCollection.create
  * Raising error in case of invalid value of since kwarg on Container.logs
  * Add support for force_update in TaskTemplate
  * Change "Remote API" to "Engine API"
  * Better error handling, itterate on json stream directly.
  * Add support for storage_opt in host_config
  * Add a specific unit test for splitting port with IPv6
  * Add support for secrets in ContainerSpec
  * Add init parameter to container HostConfig
  * dev version
  * exec: add support for `Env`
  * Update mentions of the default API version in docs
  * Remove unsupported --experimental flag from Jenkinsfile
  * Add License to PyPi metadata
  * documentation change
  * Support credHelpers section in config.json
  * Add plugin API implementation to DockerClient
  * Flake8: Fix indent.
  * Implement secrets API
  * Fix Swarm model init to correctly pass arguments through to init_swarm
  * Move LinksTest to appropriate file
  * Docstring fixes for init and init_path
  * Fix the way the list of mounts is made for service.
  * docs renames: cpu_group-&gt;cpu_period, cpu_period-&gt;cpu_quota
  * Adjust tests and add newest engine version to Jenkinsfile
  * split_port should not break when passed a non-string argument
  * Add network_mode support to Client.build
  * Add init_path parameter to container HostConfig
  * Add support for placement preferences and platforms in TaskTemplate
  * Makes docs builds faster and ensures proper ownership
  * Add support for ``runtime`` in container create and run API
  * Fix milestone link
  * Add Plugin.upgrade to documentation
  * Rename cachefrom -&gt; cache_from
  * Formatting
  * Add 17.04 (CE) RC1 to list of engine versions to be tested
  * Fix if replicas is set to 0, Fixes #1572
  * cpus renamed to nano_cpus. Type and scale of nano_cpus are changed.
    Comments for new parameters are changed.
  * Bump test engine version
  * Minor typo correction
  * Update assert in test_create_with_restart_policy
  * Add reload() in docs for Container and Secret classes
  * Add tests for secret API implementation
  * Bump default API version to 1.26
- python-docker-py got renamed to python-docker.</changelog>
  <changelog author="arun@gmx.de" date="1507118400">- specfile:
  * added obsoletes %oldpython
- update to version 2.5.1:
  * Bugfixes
    + Fixed a bug where patterns ending with ** in .dockerignore would
    raise an exception
    + Fixed a bug where using attach with the stream argument set to
    False would raise an exception
- changes from version 2.5.0:
  * Features
    + Added support for the squash parameter in APIClient.build and
    DockerClient.images.build.
    + When using API version 1.23 or above, load_image will now return
    a generator of progress as JSON dicts.
    + remove_image now returns the content of the API's response.
  * Bugfixes
    + Fixed an issue where the auto_remove parameter in
    DockerClient.containers.run was not taken into account.
    + Fixed a bug where .dockerignore patterns starting with a slash
    were ignored.
    + Fixed an issue with the handling of ** patterns in .dockerignore
    + Fixed a bug where building FROM a private Docker Hub image when
    not using a cred store would fail.
    + Fixed a bug where calling create_service or update_service with
    task_template as a dict would raise an exception.
    + Fixed the handling of TTY-enabled containers in attach and
    exec_run.
    + DockerClient.containers.run will no longer attempt to stream
    logs if the log driver doesn't support the operation.
  * Miscellaneous
    + Added extra requirements for better TLS support on some
    platforms. These can be installed or required through the
    docker[tls] notation.</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6.1:
  * Bugfixes
    + Fixed a bug on Python 3 installations preventing the use of the
    attach and exec_run methods.
- changes from version 2.6.0:
  * Features
    + Added support for mounts in APIClient.create_host_config and
    DockerClient.containers.run
    + Added support for consistency, tmpfs_size and tmpfs_mode when
    creating mount objects.
    + Mount objects now support the tmpfs and npipe types.
    + Added support for extra_hosts in the build methods.
    + Added support for the configs API:
    o In APIClient: create_config, inspect_config, remove_config,
    configs
    o In DockerClient: configs.create, configs.get, configs.list
    and the Config model.
    o Added configs parameter to ContainerSpec. Each item in the
    configs list must be a docker.types.ConfigReference instance.
    + Added support for the following parameters when creating a
    ContainerSpec object: groups, open_stdin, read_only,
    stop_signal, helathcheck, hosts, ns_config, configs, privileges.
    + Added the following configuration classes to docker.types:
    ConfigReference, DNSConfig, Privileges, SwarmExternalCA.
    + Added support for driver in APIClient.create_secret and
    DockerClient.secrets.create.
    + Added support for scope in APIClient.inspect_network and
    APIClient.create_network, and their DockerClient equivalent.
    + Added support for the following parameters to create_swarm_spec:
    external_cas, labels, signing_ca_cert, signing_ca_key,
    ca_force_rotate, autolock_managers, log_driver. These additions
    also apply to DockerClient.swarm.init.
    + Added support for insert_defaults in APIClient.inspect_service
    and DockerClient.services.get.
  * Bugfixes
    + Fixed a bug where reading a 0-length frame in log streams would
    incorrectly interrupt streaming.
    + Fixed a bug where the id member on Swarm objects wasn't being
    populated.
    + Fixed a bug that would cause some data at the beginning of an
    upgraded connection stream (attach, exec_run) to disappear.</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 3.3.0:
  * Support for API version &lt; 1.21 has been removed.
  * A number of methods have been removed, renamed, and new ones be
    added. See https://github.com/docker/docker-py/releases
    for details.
- Make sure to run tests and properly name all the requirements</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 3.4.0:
  * Features
    + The APIClient and DockerClient constructors now accept a
    credstore_env parameter. When set, values in this dictionary are
    added to the environment when executing the credential store
    process.
  * Bugfixes
    + DockerClient.networks.prune now properly returns the operation's
    result
    + Fixed a bug that caused custom Dockerfile paths in a subfolder
    of the build context to be invalidated, preventing these builds
    from working
    + The plugin_privileges method can now be called for plugins
    requiring authentication to access
    + Fixed a bug that caused attempts to read a data stream over an
    unsecured TCP socket to crash on Windows clients
    + Fixed a bug where using the read_only parameter when creating a
    service using the DockerClient was being ignored
    + Fixed an issue where Service.scale would not properly update the
    service's mode, causing the operation to fail silently</changelog>
  <changelog author="arun@gmx.de" date="1530446400">- update to version 3.4.1:
  * Bugfixes
    + Fixed a bug that caused auth values in config files written
    using one of the legacy formats to be ignored
    + Fixed issues with handling of double-wildcard ** patterns in
    .dockerignore files</changelog>
  <changelog author="dmueller@suse.com" date="1531137600">- fix build for older python 3.x versions</changelog>
  <changelog author="arun@gmx.de" date="1533988800">- specfile:
  * updated requirement python-docker-pycreds to 0.3.0
- update to version 3.5.0:
  * Deprecation warning
    + Support for Python 3.3 will be dropped in the 4.0.0 release
  * Features
    + Updated dependencies to ensure support for Python 3.7
    environments
    + Added support for the uts_mode parameter in HostConfig
    + The UpdateConfig constructor now allows rollback as a valid
    value for failure_action
    + Added support for rollback_config in APIClient.create_service,
    APIClient.update_service, DockerClient.services.create and
    Service.update.
  * Bugfixes
    + Credential helpers are now properly leveraged by the build
    method
    + Fixed a bug that caused placement preferences to be ignored when
    provided to DockerClient.services.create
    + Fixed a bug that caused a user value of 0 to be ignored in
    APIClient.create_container and DockerClient.containers.create</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Fix build on older releases by not using new pytest syntax
  for test selection</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
  <changelog author="mmachova@suse.com" date="1717588800">- Add CVE-2024-35195.patch (bsc#1224788)
  * fix failure with updated python-requests</changelog>
</package>
<package pkgid="06e75f47dcb5e5cf8d0c1fd4aa9581c594012f48755abb0ea0a8de355814c098" name="python3-ipa_hbac" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="df03cc5f4a703299abca72374f6c6b9648bb2b98177652da0f953df11bfc8276" name="python3-ipa_hbac" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="27f3c7030131d3fac4af1f6fc2038ee3fd0140ca08f9e3408ee42552fd24952e" name="python3-ipa_hbac" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="a3297a1a42ca6ec0a0873a9d86403a73a1b30b44cada8d36e00631ad1a34e517" name="python3-ipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="60440a934d175b2f043d498476005edfdbe27d920bb16911c36d5ea83a27c8e2" name="python3-libmount" arch="src">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="199b1811ce7d2b864212f3a2f7bfb41185ca3385b45b7a632a6c456a71668628" name="python3-libmount" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="f082bde2958c5c3951152334fd225a0af71e9932bb15ee0550373451ee1aaf61" name="python3-libmount" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="bbd05744fb16ca36737d194273c3af50854a3632a90df35eebe050a4cde19f4b" name="python3-libmount" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="173abae694c3f422f4fb344c944f81087b9ff1c9553804b0e2e93e391760a9e9" name="python3-libmount" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="106a902044dfaa1de812df2b04f227b786b099081d0594fcc1b412dfa6be0777" name="python3-recommonmark" arch="noarch">
  <version epoch="0" ver="0.5.0" rel="150100.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1449748800">- Initial packaging on obs</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1463659200">- Update to version 0.4.0
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491220800">- Initial python singlepsec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491480000">- Remove README since the upstream link changes unpredictably and
  there is no consistent way to pick a particular version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1500552000">- add fix-commonmark-compatibility.patch to fix imported names</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Fix the fdupes call</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1547553600">- Update to version 0.5.0:
  * No upstream changelog available.
- remove unneeded fix-commonmark-compatibility.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716465600">- Rename changelog and the SPEC file to python3- form (jsc#PED-8481).</changelog>
</package>
<package pkgid="4538741ead4b5790a66b05a37340e8bc5d98e29c7758ae94368235beccfa7a14" name="python3-recommonmark" arch="src">
  <version epoch="0" ver="0.5.0" rel="150100.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1449748800">- Initial packaging on obs</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1463659200">- Update to version 0.4.0
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491220800">- Initial python singlepsec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491480000">- Remove README since the upstream link changes unpredictably and
  there is no consistent way to pick a particular version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1500552000">- add fix-commonmark-compatibility.patch to fix imported names</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Fix the fdupes call</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1547553600">- Update to version 0.5.0:
  * No upstream changelog available.
- remove unneeded fix-commonmark-compatibility.patch</changelog>
  <changelog author="mcepl@suse.com" date="1716465600">- Rename changelog and the SPEC file to python3- form (jsc#PED-8481).</changelog>
</package>
<package pkgid="bbe10865c030919d8adf570b7b1384488c231ce9cffa693cc129e32562e920fc" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="8b7e842299e949f8f49812333ad41298128780d5d011d70f3793d381557b14e6" name="python3-rpm" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="812ec6105d2a7a97147c197b5ff816b5ab35509b7f8ed8192fbf454026eb75a8" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="909fb9f987f3cedc24996f0acfbe77ab681cc3565022edaa34010c6cab79bbe5" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="8cde09bc03c5b422dd1590edf3cee84d7c3fd0ad75529df5c7d28cebaf4055e0" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="21d665ecf70e3839479d42ed021421df35438a59cc923d6a3d9394afc18cb818" name="python3-salt" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="ef4dde233e88f18f4ff39e200033d866c2ee373b0b9c2895ada8805205bf482d" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="a3765070443de300e4460ea4673ae22e8ce3752bc7dfa56c679cba5413136566" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="09e5abbf3a0f9401ea2c12e09787801dcf5635a370fe16b18fd5e99bbfc68411" name="python3-salt-testsuite" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="6570071332ee4b53ed6ecaeec11e7343ab21d6868146640e10048a599ddddfc2" name="python3-salt-testsuite" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="9434f0e8d0dad40248686cc2feead2f180afed1b2dcdd0ac24aa53f1532ce9c3" name="python3-salt-testsuite" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="1dec3c70663ebc6553d9200c227aa6ba32e64485fd55c7bf3b4c1d0929a4025e" name="python3-salt-testsuite" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="722cabc2199079ee7863c9f14adced4fd30d8dfae6a4b1a92aae7b2a1bf87220" name="python3-sss-murmur" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ae9cfe4ebc8736b06a96d329aa0f7d04d9b8e28f38f15b11a01e909d3b707146" name="python3-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8307762f79069fcde5a97bee3cec10eec57297ba91719135bb085d0f4b5ca1b7" name="python3-sss-murmur" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="d28a56fabe4e8f8f17092e3657ecf67ac034b8618200b888d43b017e4d52f754" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="709ed1f475ecac37a150e8aa23a28b5ac39fa23cf7e40089e57e43c853cfe5e5" name="python3-sss_nss_idmap" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="e407bae4af5b409b9dc23f7cba212ecd9578b3ae0ae81548b342a412da9e30a5" name="python3-sss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8d106a769986099239a1b7f0ad67043573e19b6c69b29bd75625999964d0dbd1" name="python3-sss_nss_idmap" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="33c14a45bf9bc255ec9d3fdb9d7b78cd2cec423b82b790c39f9a52e94aae024f" name="python3-sss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="33c573f604642b9ce41f0fbc7d46ad7082f35140c44d0e8659ebebf4d445c64c" name="python3-sssd-config" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="bef6833ac5226dd09b90d218a4765f06c7f762982a63db75b7da305befb8ae34" name="python3-sssd-config" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="5c9f389ef17019f515fb9e2ac8851668794f9a14a775795afa39a43f89d787b5" name="python3-sssd-config" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="c498b94da55940d765da8f12871aefdb5ec212a9fb2a194f9d6da673131558c8" name="python3-sssd-config" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ce4c1aa116305f6e8824fcd0ce503ee4b7b7c408e98ec132d8f590ce18803c77" name="python3-threadpoolctl" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="150300.3.2.1"/>
  <changelog author="pgajdos@suse.com" date="1583409600">- initial version 2.0.0, required by python-joblib</changelog>
  <changelog author="mcalabkova@suse.com" date="1595592000">- update to 2.1.0
  * New commandline interface: 'python -m threadpoolctl -i numpy'
    will try to import the `numpy` package and then return the output of
    `threadpoolctl.threadpool_info()` on STDOUT formatted using the JSON
    syntax. This makes it easier to quickly introspect a Python environment.
- Add patch python_executable.patch</changelog>
</package>
<package pkgid="34c6814c935f7119f8582f6e0a73f4aed4cba4f3e8832fa74c416b1a314f9a9e" name="python310" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="d9ce4a8f2a53a762bc1aa652ef468182467d298f77fc3f340a26d3c1bca47a4d" name="python310" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="e4da47cde113e7d905cef37bc21143adaf5efaf2523d6a8fe333a36801e505b7" name="python310" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="0d3887ab6bef553866cdd272dd0695b9d5b76a77005b3160a7c27453b22a0d44" name="python310" arch="src">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="95e447b431848e5a35ff2c09d532c3b20c69faa1bfe91f557d949feb1eeb2c62" name="python310" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="bb8bf6389f59b98e148d15bc7b9f44dbfc006b22676d9710ee1334145b62274a" name="python310-32bit" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="fb9d284726b5eb6b7bd702b396d1088742f25e3af1fe5ced984c6b1fae23058e" name="python310-base" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="6b01fb3ae4dbf6f54c83064393eae9fb494e82e29d2d9a28bd9107110c642f68" name="python310-base" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="a10a7ba187fa3ceab433ecdfbdd699c62b3562584b43f3d607cc3a887461b7bb" name="python310-base" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="13f415ba5df5270e5ae7fd694a00946c59d8302fc0cc8a9201fb21f3b602f0bc" name="python310-base" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="9d4c0e0e50646de6aeb3eae61ceb7a45c87349cb550c927585386340f06376bb" name="python310-base-32bit" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="a02ff6cfc52fdb9e39f65ada5423df075726aeb86ee5933bd899454fd460601a" name="python310-core" arch="src">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="57f85c057ddf912e571698c6c30e6ac879565d3ea4d22b4a4128a4fa7bc8a3be" name="python310-curses" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="7845ea704ec08c45a4741dcfc18c592d38bd80287b2fc93789899299ad06635f" name="python310-curses" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="38e899dc2edcc2bdc484f7c54b13219429f551d98d971f1c721ef6c63c22da75" name="python310-curses" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="3bde1be18678eca5fd7e6d7db14cead5b6f69634240b52ec280068ec1599be88" name="python310-curses" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="cfa82467457ceb3bfd8bba14d9a080b323496f5e795a66fc58db4a8380a4de02" name="python310-dbm" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="ff4a88577e237d3e9c378e0556089ac72b7d64b3cfb5b2d264a1cc5d77a99843" name="python310-dbm" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="3fe3917bceab41803299d434e038134f51b51517b682c6be268dae1bbd2764cb" name="python310-dbm" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="a59251079f91b97f65877676556157d1245327ae109e73a166e2a30f58886f03" name="python310-dbm" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="eb4eea088ebc619a7238f230b17527c80d44348f9179c32b89e4aaad7e6078b4" name="python310-devel" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="b51b5f7bde3a54459605fd600d8bc29e7b1d141888bc1123ee6ae6aa9af28699" name="python310-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="0a12ef0971aa9d6d30e563e0628b127d15b37d1fb9cd5ef67b6fae609854dab3" name="python310-devel" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="d73f4f61bc9167fd9b27ff545dab6b8bb4e231e400d3f34eaee6912ab2e1f078" name="python310-devel" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="e6848910e227dca83c2533668b419e3a3e3aed3f96331545931fdced46fc4df5" name="python310-doc" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="95cd6e828c275e69a5f1f59d612f9f1290ed0462d243082264ad21a079d6b726" name="python310-doc" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="3406f8b315e26cb087a67fe3f9847c8783c7cfe21d79bbd64f314b4411214729" name="python310-doc" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="912ddb5dea02bef172f27a8ee1a145c94ae6f402849ec3e54d6a21fa87697182" name="python310-doc" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="ea04feeefd528f1b4afcef8b747f1fee8d3dbf2114064cecdb5bfbf0a1a1045a" name="python310-doc-devhelp" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="135c4ebc2c950fbd553e758f72f4770346e0febe8e6396b7e255a8380ca4e27b" name="python310-doc-devhelp" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="0da9ac374fa1103f9198073892d812a8a561810e66383710c84f5271f9ab3035" name="python310-doc-devhelp" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="1ec705915a270f231091a502812749afdd2858e8e95878525d65df3c787ee979" name="python310-doc-devhelp" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="df5890337da65c2479bff8a9249b66dec662660abfca8ac0de9a5b425bd374a3" name="python310-documentation" arch="src">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="c03953ebc828e2f4b71a9ed0444013894a5f54e8c67141599dafeefc115ce90d" name="python310-idle" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="db76dbc9568efa56b81bcd0b062c1047079e0625cc04939f31c76852a23d96dd" name="python310-idle" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="91f1380902136799b316ae263f87cc6d38bd9bd9f34935dbad6cfa2eaf1580dc" name="python310-idle" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="5e847d0692f2b49f3411bf40157cc43bbeb8b639c6130ae3d909cad95e740361" name="python310-idle" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="27976909a4b72f4a4ed54c78619b1519baa2c3227a55b2f8580746cd1551910e" name="python310-testsuite" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="75a2dd02ee5ac3465cf1d5189d0c39d9d0d4e8d69ed5616b51a4ebec12180e7b" name="python310-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="9feb4fa11638a2d67c0b918d82d92b51d2fec06faf2fcfe66e44444f8e3026f2" name="python310-testsuite" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="5cc5989319afd1d7323daa152c9c8ac95066b628e46935acd85ad1bd756814ce" name="python310-testsuite" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="78526bea31cf17a73021ffdd867a3cf5fd29f05685bd932f511dc5bf59f5d260" name="python310-tk" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="17550ef7f5f238bcc16076eb1777c0af98bb0ec1c9fc4f4d778705289db6f0ed" name="python310-tk" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="2f8d7fab3736199101e417d4c47c44fd5adf6c43fdae77973a04836f3bc47577" name="python310-tk" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="bf7f5440d876b06917a5aaf0869290ed25075291501fae61205708162d791578" name="python310-tk" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="6e48232026e78676877f6e37a24c2ad501e0cc67547e318e6bdcae26d4ce4947" name="python310-tools" arch="aarch64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="b4ffff63afeaf41504b451a3893b2ad5585e4749f3168ca827a99cd9cf166658" name="python310-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="560007cdce74784e6359a69a37cc57a9e846e49929ea205549ee451c30a76450" name="python310-tools" arch="s390x">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="5fbc2411748019d541e5810afc6a89bb40abfd4e5e0eb4065842668ac70f08ef" name="python310-tools" arch="x86_64">
  <version epoch="0" ver="3.10.14" rel="150400.4.48.1"/>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1687262400">- Add bpo-37596-make-set-marshalling.patch making marshalling of
  `set` and `frozenset` deterministic (bsc#1211765).</changelog>
  <changelog author="mcepl@suse.com" date="1687953600">- Update to 3.10.12:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2023-24329-blank-URL-bypass.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch</changelog>
  <changelog author="mcepl@suse.com" date="1689076800">- (bsc#1210638, CVE-2023-27043) Add
  CVE-2023-27043-email-parsing-errors.patch, which detects email
  address parsing errors and returns empty tuple to indicate the
  parsing error (old API).</changelog>
  <changelog author="mcepl@suse.com" date="1689768000">- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
  stabilizing FLAG_REF usage (required for reproduceability;
  bsc#1213463).</changelog>
  <changelog author="mcepl@suse.com" date="1691064000">- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1693828800">- Add fix-sphinx-72.patch to make it work with latest sphinx version
  gh#python/cpython#97950
- Update to 3.10.13 (bsc#1214692):
  - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
    vulnerable to a bypass of the TLS handshake and included
    protections (like certificate verification) and treating sent
    unencrypted data as if it were post-handshake TLS encrypted data.
    Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
    Gregory P. Smith.
  - gh-107845: tarfile.data_filter() now takes the location of
    symlinks into account when determining their target, so it will no
    longer reject some valid tarballs with
    LinkOutsideDestinationError.
  - gh-107565: Update multissltests and GitHub CI workflows to use
    OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
  - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
  * consumed was not set.</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).
- Thus we can remove Revert-gh105127-left-tests.patch, which is
  now useless.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707998400">- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser
  with Expat 2.6.0, gh#python/cpython#115289</changelog>
  <changelog author="mcepl@cepl.eu" date="1708430400">- Remove double definition of /usr/bin/idle%%{version} in
  %%files.</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.</changelog>
  <changelog author="pmonreal@suse.com" date="1709726400">- Use the system-wide crypto-policies [bsc#1211301]
  * Use the system default cipher list instead of hardcoded values
  * Add the --with-ssl-default-suites=openssl configure option</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update 3.10.14:
  - gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  - gh-115197: urllib.request no longer resolves the hostname
    before checking it against the system’s proxy bypass list on
    macOS and Windows
  - gh-81194: a crash in socket.if_indextoname() with a specific
    value (UINT_MAX) was fixed. Relatedly, an integer overflow in
    socket.if_indextoname() on 64-bit non-Windows platforms was
    fixed
  - gh-113659: .pth files with names starting with a dot or
    containing the hidden file attribute are now skipped
  - gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
    read out of bounds
  - gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to
    the certificate store, when the ssl.SSLContext is shared
    across multiple threads
- Remove upstreamed patches:
  - CVE-2023-6597-TempDir-cleaning-symlink.patch
  - libexpat260.patch
- Readjust patches:
  - F00251-change-user-install-location.patch
  - fix_configure_rst.patch
  - python-3.3.0b1-localpath.patch
  - skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711108800">- Because of bsc#1189495 we have to revert use of %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1711281600">- Add old-libexpat.patch making the test suite work with
  libexpat &lt; 2.6.0 (gh#python/cpython#117187).</changelog>
  <changelog author="mcepl@suse.com" date="1713528000">- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with
  patched libexpat below 2.6.0 that doesn't update the version number,
  just in SLE.
- Drop old-libexpat.patch, which is replaced.</changelog>
</package>
<package pkgid="e9d0517729997dcc2003750fd68931125886e943e7871264d4d5bdf7ae2a936e" name="python311-Automat" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.3.7.2"/>
  <changelog author="termim@gmail.com" date="1485259200">- Initial check in version 0.4.0</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- update to version v0.6.0
  * use version-specific travis environments
  * tox/travis: enable tests on py3.5
  * add a comment: this check doesn't catch non-None returns
  * improve function-is-empty test to work on py3.6 too
  * add more metadata to setup
  * graphviz() -&gt; asDigraph()
  * Use inspect.getfullargspec on Py3 to avoid deprecation warnings with inspect.getargspec
  * add tracing API, with docs
  * Conform author metadata to `distutils.core` API
  * tracer can return a callable to see Output invocations
  * Make hashable classes frozen for attrs 17.1.0 (fixes #62).
  * Assert that 'input' function bodies are empty, to avoid surprises.
  * reject duplicate transitions (same starting state and input)
  * tox/travis: enable tests on py3.6
  * improve tests: more cases, make pyflakes-clean
  * sigh, add more code to attain full test coverage
  * make setTrace a private API, document cautions about its use
  * cover the specimen functions in tests, remove ordify()
  * cleanup: s/assert_no_code/assertNoCode/
- convert to singlespec
- fix Source url</changelog>
  <changelog author="tchvatal@suse.com" date="1551787200">- Update to version 0.7.0:
  * test updates
  * pep fixes
- Run tests</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Add mulitbuild to make sure we do not cycle</changelog>
  <changelog author="steven.kowalik@suse.com" date="1574683200">- Update to version 0.8.0:
  * Retrieve the version from the installed distribution.
  * Add support for Python 3.8
  * Remove support for 3.4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 20.2.0
  * Fix attrs warnings</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Don't buildrequire unmaintained m2r</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Update to 22.10.0
  * Fix _test_visualize.py twisted import errors
  * Fix #17: Allow enter to have a default
  * Use CodeType.replace() in copycode for Python &gt; 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="fbb8a6dcc6e70c5ee9b31e011a48f33d5e788d3e0b29d14f0d71f496f1740d32" name="python311-Deprecated" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="150400.10.7.2"/>
  <changelog author="tchvatal@suse.com" date="1551873600">- Initial commit, needed by PyGithub</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.2.6:
  * Fix #9: Change the project's configuration: reinforce the constraint to the Wrapt requirement.</changelog>
  <changelog author="mcalabkova@suse.com" date="1578916800">- update to 1.2.7
  * Fix: Warning displays the correct filename and line number when
    decorating a function if wrapt does not have the compiled c extension.
  * Add Black configuration file.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 1.2.9
  * Fix #20: Set the :func:warnings.warn stacklevel to 2 if
    the Python implementation is PyPy
  * Fix packit configuration: use dist-git-branch: fedora-all
  * Change the Tox configuration to run tests on PyPy v2.7 and 3.6.
  * Fix #15: The @deprecated decorator doesn't set a warning
    filter if the action keyword argument is not provided or None.
  * Fix #13: Warning displays the correct filename and line
    number when decorating a class if wrapt does not have the compiled c
    extension.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1594209600">- Update to 1.2.10
  * Fix #25: @deprecated respects global warning filters with actions other
    than “ignore” and “always” on Python 3.</changelog>
  <changelog author="code@bnavigator.de" date="1618747200">- Update to 1.2.12
  * Avoid "Explicit markup ends without a blank line" when the
    decorated function has no docstring.
  * Fix #40: 'version' argument is required in Sphinx directives.
  * Fix #41: deprecated.sphinx: strip Sphinx cross-referencing
    syntax from warning message.
- Release 1.2.11
  * Fix packit configuration: use upstream_tag_template: v{version}.
  * Fix #33: Change the class ~deprecated.sphinx.SphinxAdapter: add
    the line_length keyword argument to the constructor to specify
    the max line length of the directive text. Sphinx decorators
    also accept the line_length argument.
  * Fix #34: versionadded and versionchanged decorators don't emit
    DeprecationWarning anymore on decorated classes.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 1.2.13:
  * Change the signature of the :func:`~deprecated.sphinx.deprecated` decorator to reflect
    the valid use cases.
  * Fix ``versionadded`` and ``versionchanged`` decorators: do not return a decorator factory,
    but a Wrapt adapter.
  * change the requirements for ``pip`` to "pip &gt;= 9.0.3, &lt; 21" (Python 2.7, 3.4 and 3.5).
  * install ``typing`` when building on Python 3.4 (required by Pytest-&gt;Attrs).
  * run unit tests on Wrapt 1.13 (release candidate).</changelog>
  <changelog author="code@bnavigator.de" date="1667217600">- Provid canonicalized lowercase name
- Don't catchall files section</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1685361600">- update to 1.2.14:
  * Bug fix release
  * Fix return a correctly dedented docstring when long
    docstring are using the D212 or D213 format.
  * Add support for Python 3.11.
  * Drop support for Python older than 3.7 in build systems like
    pytest and tox, while ensuring the library remains
    production-compatible.</changelog>
</package>
<package pkgid="9f9dad53717311e90b1343ceef898606878fe437aadab2b892de321b223ffb01" name="python311-Jinja2" arch="aarch64">
  <version epoch="0" ver="3.1.2" rel="150400.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 2.11.1
  * Fix a bug that prevented looking up a key after an attribute
  ({{ data.items[1:] }}) in an async template
  * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
  to support Python 2.7 and 3.5.
  * Added a new ChainableUndefined class to support getitem and getattr
  on an undefined object.
  * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
  * Added a default parameter for the map filter.
  * Exclude environment globals from meta.find_undeclared_variables().
  * Float literals can be written with scientific notation, like 2.56e-3.
  * Int and float literals can be written with the ‘_’ separator
  for legibility, like 12_345.
  * Fix a bug causing deadlocks in LRUCache.setdefault
  * The trim filter takes an optional string of characters to trim.
  * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
  the current context and available filters and tests.
  * Lexing templates with large amounts of whitespace is much faster.
  * Parentheses around comparisons are preserved, so {{ 2 * (3 &lt; 5) }} outputs
  “2” instead of “False”.
  * Add new boolean, false, true, integer and float tests.
  * The environment’s finalize function is only applied to the output of expressions
  (constant or not), not static template data.
  * When providing multiple paths to FileSystemLoader, a template can have
  the same name as a directory.
  * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
  expression, regardless of the environment’s undefined class. Omitting
  the else clause is a valid shortcut and should not raise an error when using
  StrictUndefined.
  * Fix behavior of loop control variables such as length and revindex0 when
  looping over a generator.
  * Async support is only loaded the first time an environment enables it,
  in order to avoid a slow initial import.
  * In async environments, the |map filter will await the filter call if needed.
  * In for loops that access loop attributes, the iterator is not advanced ahead
  of the current iteration unless length, revindex, nextitem, or last are accessed.
  This makes it less likely to break groupby results.
  * In async environments, the loop attributes length and revindex work for async iterators.
  * In async environments, values from attribute/property access will be awaited if needed.
  * PackageLoader doesn’t depend on setuptools or pkg_resources.
  * PackageLoader has limited support for PEP 420 namespace packages.
  * Support os.PathLike objects in FileSystemLoader and ModuleLoader
  * NativeTemplate correctly handles quotes between expressions. "'{{ a }}', '{{ b }}'"
  renders as the tuple ('1', '2') rather than the string '1, 2'.
  * Creating a NativeTemplate directly creates a NativeEnvironment instead
  of a default Environment.
  * After calling LRUCache.copy(), the copy’s queue methods point to the correct queue.
  * Compiling templates always writes UTF-8 instead of defaulting to the system encoding.
  * |wordwrap filter treats existing newlines as separate paragraphs to be wrapped
  individually, rather than creating short intermediate lines.
  * Add break_on_hyphens parameter to |wordwrap filter.
  * Cython compiled functions decorated as context functions will be passed the context.
  * When chained comparisons of constants are evaluated at compile time,
  the result follows Python’s behavior of returning False if any comparison
  returns False, rather than only the last one
  * Tracebacks for exceptions in templates show the correct line numbers
  and source for Python &gt;= 3.7.
  * Tracebacks for template syntax errors in Python 3 no longer show
  internal compiler frames
  * Add a DerivedContextReference node that can be used by extensions to get
  the current context and local variables such as loop
  * Constant folding during compilation is applied to some node types
  that were previously overlooked
  * TemplateSyntaxError.source is not empty when raised from an included template.
  * Passing an Undefined value to get_template (such as through extends, import,
  or include), raises an UndefinedError consistently. select_template will show
  the undefined message in the list of attempts rather than the empty string.
  * TemplateSyntaxError can be pickled.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582286400">- disable tests on 32bit archs</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Enable testing on other archs again
- Do not pull in py2 package on vim syntax</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 2.11.2
  * Fix a bug that caused callable objects with __getattr__, like
    :class:~unittest.mock.Mock to be treated as a
    :func:contextfunction. :issue:1145
  * Update wordcount filter to trigger :class:Undefined methods
    by wrapping the input in :func:soft_unicode. :pr:1160
  * Fix a hang when displaying tracebacks on Python 32-bit.
    :issue:1162
  * Showing an undefined error for an object that raises
    AttributeError on access doesn't cause a recursion error.
    :issue:1177
  * Revert changes to :class:~loaders.PackageLoader from 2.10 which
    removed the dependency on setuptools and pkg_resources, and added
    limited support for namespace packages. The changes caused issues
    when using Pytest. Due to the difficulty in supporting Python 2 and
    :pep:451 simultaneously, the changes are reverted until 3.0.
    :pr:1182
  * Fix line numbers in error messages when newlines are stripped.
    :pr:1178
  * The special namespace() assignment object in templates works in
    async environments. :issue:1180
  * Fix whitespace being removed before tags in the middle of lines when
    lstrip_blocks is enabled. :issue:1138
  * :class:~nativetypes.NativeEnvironment doesn't evaluate
    intermediate strings during rendering. This prevents early
    evaluation which could change the value of an expression.
    :issue:1186</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    Email matching requires a word character at the start of the domain part
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists</changelog>
  <changelog author="adrian@suse.de" date="1622462400">- update to 3.0.1
  Read the announcement:
    https://palletsprojects.com/blog/flask-2-0-released/
  Read the full list of changes:
    https://jinja.palletsprojects.com/changes/#version-3-0-0
- python-Jinja2-vim subpackage dropped
  vim highlight rule files do not exist anymore</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- updated upstream project URL</changelog>
  <changelog author="code@bnavigator.de" date="1625832000">- clean up single-spec: Remove python2 remnants</changelog>
  <changelog author="mmachova@suse.com" date="1628251200">- Babel is not required</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631275200">- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.</changelog>
  <changelog author="michael@stroeder.com" date="1633867200">- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
  * Fix a loop scoping bug that caused assignments in nested loops to still
    be referenced outside of it. #1427
  * Make compile_templates deterministic for filter and import names. #1452, #1453
  * Revert an unintended change that caused Undefined to act like
    StrictUndefined for the in operator. #1448
  * Imported macros have access to the current template globals in async
    environments. #1494
  * PackageLoader will not include a current directory (.) path segment.
    This allows loading templates from the root of a zip import. #1467</changelog>
  <changelog author="michael@stroeder.com" date="1636891200">- update to 3.0.3
  * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
  * Fix how the native environment treats leading and trailing spaces
    when parsing values on Python 3.10. (PR#1537)
  * Improve async performance by avoiding checks for common types. (#1514)
  * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
  * ``PackageLoader`` works when the package is a single module file. (#1512)</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- specfile:
  * update copyright year
  * require python-base &gt;= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
    "pass_context". "evalcontextfilter" and "evalcontextfunction"
    are replaced by "pass_eval_context".  "environmentfilter" and
    "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
    recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
    supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
    passing a context string as the first token in the tag, like "{%
    trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
    :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
    :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
    calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
    other comparison filters. Added the "case_sensitive" parameter
    to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
    result in "FileSystemLoader" and "PackageLoader" loading from
    drive-relative paths. :pr:`1621`</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`</changelog>
  <changelog author="kastl@b1-systems.de" date="1669982400">- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
  deprecated and will be removed in a future release.' error from
  pytest 7.2</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="98dcde8a20ed7ad775d59b0db41691ea2014b85d0817eebd1117daf445500b9f" name="python311-Jinja2" arch="ppc64le">
  <version epoch="0" ver="3.1.2" rel="150400.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 2.11.1
  * Fix a bug that prevented looking up a key after an attribute
  ({{ data.items[1:] }}) in an async template
  * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
  to support Python 2.7 and 3.5.
  * Added a new ChainableUndefined class to support getitem and getattr
  on an undefined object.
  * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
  * Added a default parameter for the map filter.
  * Exclude environment globals from meta.find_undeclared_variables().
  * Float literals can be written with scientific notation, like 2.56e-3.
  * Int and float literals can be written with the ‘_’ separator
  for legibility, like 12_345.
  * Fix a bug causing deadlocks in LRUCache.setdefault
  * The trim filter takes an optional string of characters to trim.
  * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
  the current context and available filters and tests.
  * Lexing templates with large amounts of whitespace is much faster.
  * Parentheses around comparisons are preserved, so {{ 2 * (3 &lt; 5) }} outputs
  “2” instead of “False”.
  * Add new boolean, false, true, integer and float tests.
  * The environment’s finalize function is only applied to the output of expressions
  (constant or not), not static template data.
  * When providing multiple paths to FileSystemLoader, a template can have
  the same name as a directory.
  * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
  expression, regardless of the environment’s undefined class. Omitting
  the else clause is a valid shortcut and should not raise an error when using
  StrictUndefined.
  * Fix behavior of loop control variables such as length and revindex0 when
  looping over a generator.
  * Async support is only loaded the first time an environment enables it,
  in order to avoid a slow initial import.
  * In async environments, the |map filter will await the filter call if needed.
  * In for loops that access loop attributes, the iterator is not advanced ahead
  of the current iteration unless length, revindex, nextitem, or last are accessed.
  This makes it less likely to break groupby results.
  * In async environments, the loop attributes length and revindex work for async iterators.
  * In async environments, values from attribute/property access will be awaited if needed.
  * PackageLoader doesn’t depend on setuptools or pkg_resources.
  * PackageLoader has limited support for PEP 420 namespace packages.
  * Support os.PathLike objects in FileSystemLoader and ModuleLoader
  * NativeTemplate correctly handles quotes between expressions. "'{{ a }}', '{{ b }}'"
  renders as the tuple ('1', '2') rather than the string '1, 2'.
  * Creating a NativeTemplate directly creates a NativeEnvironment instead
  of a default Environment.
  * After calling LRUCache.copy(), the copy’s queue methods point to the correct queue.
  * Compiling templates always writes UTF-8 instead of defaulting to the system encoding.
  * |wordwrap filter treats existing newlines as separate paragraphs to be wrapped
  individually, rather than creating short intermediate lines.
  * Add break_on_hyphens parameter to |wordwrap filter.
  * Cython compiled functions decorated as context functions will be passed the context.
  * When chained comparisons of constants are evaluated at compile time,
  the result follows Python’s behavior of returning False if any comparison
  returns False, rather than only the last one
  * Tracebacks for exceptions in templates show the correct line numbers
  and source for Python &gt;= 3.7.
  * Tracebacks for template syntax errors in Python 3 no longer show
  internal compiler frames
  * Add a DerivedContextReference node that can be used by extensions to get
  the current context and local variables such as loop
  * Constant folding during compilation is applied to some node types
  that were previously overlooked
  * TemplateSyntaxError.source is not empty when raised from an included template.
  * Passing an Undefined value to get_template (such as through extends, import,
  or include), raises an UndefinedError consistently. select_template will show
  the undefined message in the list of attempts rather than the empty string.
  * TemplateSyntaxError can be pickled.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582286400">- disable tests on 32bit archs</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Enable testing on other archs again
- Do not pull in py2 package on vim syntax</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 2.11.2
  * Fix a bug that caused callable objects with __getattr__, like
    :class:~unittest.mock.Mock to be treated as a
    :func:contextfunction. :issue:1145
  * Update wordcount filter to trigger :class:Undefined methods
    by wrapping the input in :func:soft_unicode. :pr:1160
  * Fix a hang when displaying tracebacks on Python 32-bit.
    :issue:1162
  * Showing an undefined error for an object that raises
    AttributeError on access doesn't cause a recursion error.
    :issue:1177
  * Revert changes to :class:~loaders.PackageLoader from 2.10 which
    removed the dependency on setuptools and pkg_resources, and added
    limited support for namespace packages. The changes caused issues
    when using Pytest. Due to the difficulty in supporting Python 2 and
    :pep:451 simultaneously, the changes are reverted until 3.0.
    :pr:1182
  * Fix line numbers in error messages when newlines are stripped.
    :pr:1178
  * The special namespace() assignment object in templates works in
    async environments. :issue:1180
  * Fix whitespace being removed before tags in the middle of lines when
    lstrip_blocks is enabled. :issue:1138
  * :class:~nativetypes.NativeEnvironment doesn't evaluate
    intermediate strings during rendering. This prevents early
    evaluation which could change the value of an expression.
    :issue:1186</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    Email matching requires a word character at the start of the domain part
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists</changelog>
  <changelog author="adrian@suse.de" date="1622462400">- update to 3.0.1
  Read the announcement:
    https://palletsprojects.com/blog/flask-2-0-released/
  Read the full list of changes:
    https://jinja.palletsprojects.com/changes/#version-3-0-0
- python-Jinja2-vim subpackage dropped
  vim highlight rule files do not exist anymore</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- updated upstream project URL</changelog>
  <changelog author="code@bnavigator.de" date="1625832000">- clean up single-spec: Remove python2 remnants</changelog>
  <changelog author="mmachova@suse.com" date="1628251200">- Babel is not required</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631275200">- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.</changelog>
  <changelog author="michael@stroeder.com" date="1633867200">- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
  * Fix a loop scoping bug that caused assignments in nested loops to still
    be referenced outside of it. #1427
  * Make compile_templates deterministic for filter and import names. #1452, #1453
  * Revert an unintended change that caused Undefined to act like
    StrictUndefined for the in operator. #1448
  * Imported macros have access to the current template globals in async
    environments. #1494
  * PackageLoader will not include a current directory (.) path segment.
    This allows loading templates from the root of a zip import. #1467</changelog>
  <changelog author="michael@stroeder.com" date="1636891200">- update to 3.0.3
  * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
  * Fix how the native environment treats leading and trailing spaces
    when parsing values on Python 3.10. (PR#1537)
  * Improve async performance by avoiding checks for common types. (#1514)
  * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
  * ``PackageLoader`` works when the package is a single module file. (#1512)</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- specfile:
  * update copyright year
  * require python-base &gt;= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
    "pass_context". "evalcontextfilter" and "evalcontextfunction"
    are replaced by "pass_eval_context".  "environmentfilter" and
    "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
    recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
    supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
    passing a context string as the first token in the tag, like "{%
    trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
    :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
    :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
    calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
    other comparison filters. Added the "case_sensitive" parameter
    to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
    result in "FileSystemLoader" and "PackageLoader" loading from
    drive-relative paths. :pr:`1621`</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`</changelog>
  <changelog author="kastl@b1-systems.de" date="1669982400">- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
  deprecated and will be removed in a future release.' error from
  pytest 7.2</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="476457bc5a189c2a92a3d05b192be38f96211e0084c347cbc6a5749f63e01d85" name="python311-Jinja2" arch="s390x">
  <version epoch="0" ver="3.1.2" rel="150400.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 2.11.1
  * Fix a bug that prevented looking up a key after an attribute
  ({{ data.items[1:] }}) in an async template
  * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
  to support Python 2.7 and 3.5.
  * Added a new ChainableUndefined class to support getitem and getattr
  on an undefined object.
  * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
  * Added a default parameter for the map filter.
  * Exclude environment globals from meta.find_undeclared_variables().
  * Float literals can be written with scientific notation, like 2.56e-3.
  * Int and float literals can be written with the ‘_’ separator
  for legibility, like 12_345.
  * Fix a bug causing deadlocks in LRUCache.setdefault
  * The trim filter takes an optional string of characters to trim.
  * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
  the current context and available filters and tests.
  * Lexing templates with large amounts of whitespace is much faster.
  * Parentheses around comparisons are preserved, so {{ 2 * (3 &lt; 5) }} outputs
  “2” instead of “False”.
  * Add new boolean, false, true, integer and float tests.
  * The environment’s finalize function is only applied to the output of expressions
  (constant or not), not static template data.
  * When providing multiple paths to FileSystemLoader, a template can have
  the same name as a directory.
  * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
  expression, regardless of the environment’s undefined class. Omitting
  the else clause is a valid shortcut and should not raise an error when using
  StrictUndefined.
  * Fix behavior of loop control variables such as length and revindex0 when
  looping over a generator.
  * Async support is only loaded the first time an environment enables it,
  in order to avoid a slow initial import.
  * In async environments, the |map filter will await the filter call if needed.
  * In for loops that access loop attributes, the iterator is not advanced ahead
  of the current iteration unless length, revindex, nextitem, or last are accessed.
  This makes it less likely to break groupby results.
  * In async environments, the loop attributes length and revindex work for async iterators.
  * In async environments, values from attribute/property access will be awaited if needed.
  * PackageLoader doesn’t depend on setuptools or pkg_resources.
  * PackageLoader has limited support for PEP 420 namespace packages.
  * Support os.PathLike objects in FileSystemLoader and ModuleLoader
  * NativeTemplate correctly handles quotes between expressions. "'{{ a }}', '{{ b }}'"
  renders as the tuple ('1', '2') rather than the string '1, 2'.
  * Creating a NativeTemplate directly creates a NativeEnvironment instead
  of a default Environment.
  * After calling LRUCache.copy(), the copy’s queue methods point to the correct queue.
  * Compiling templates always writes UTF-8 instead of defaulting to the system encoding.
  * |wordwrap filter treats existing newlines as separate paragraphs to be wrapped
  individually, rather than creating short intermediate lines.
  * Add break_on_hyphens parameter to |wordwrap filter.
  * Cython compiled functions decorated as context functions will be passed the context.
  * When chained comparisons of constants are evaluated at compile time,
  the result follows Python’s behavior of returning False if any comparison
  returns False, rather than only the last one
  * Tracebacks for exceptions in templates show the correct line numbers
  and source for Python &gt;= 3.7.
  * Tracebacks for template syntax errors in Python 3 no longer show
  internal compiler frames
  * Add a DerivedContextReference node that can be used by extensions to get
  the current context and local variables such as loop
  * Constant folding during compilation is applied to some node types
  that were previously overlooked
  * TemplateSyntaxError.source is not empty when raised from an included template.
  * Passing an Undefined value to get_template (such as through extends, import,
  or include), raises an UndefinedError consistently. select_template will show
  the undefined message in the list of attempts rather than the empty string.
  * TemplateSyntaxError can be pickled.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582286400">- disable tests on 32bit archs</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Enable testing on other archs again
- Do not pull in py2 package on vim syntax</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 2.11.2
  * Fix a bug that caused callable objects with __getattr__, like
    :class:~unittest.mock.Mock to be treated as a
    :func:contextfunction. :issue:1145
  * Update wordcount filter to trigger :class:Undefined methods
    by wrapping the input in :func:soft_unicode. :pr:1160
  * Fix a hang when displaying tracebacks on Python 32-bit.
    :issue:1162
  * Showing an undefined error for an object that raises
    AttributeError on access doesn't cause a recursion error.
    :issue:1177
  * Revert changes to :class:~loaders.PackageLoader from 2.10 which
    removed the dependency on setuptools and pkg_resources, and added
    limited support for namespace packages. The changes caused issues
    when using Pytest. Due to the difficulty in supporting Python 2 and
    :pep:451 simultaneously, the changes are reverted until 3.0.
    :pr:1182
  * Fix line numbers in error messages when newlines are stripped.
    :pr:1178
  * The special namespace() assignment object in templates works in
    async environments. :issue:1180
  * Fix whitespace being removed before tags in the middle of lines when
    lstrip_blocks is enabled. :issue:1138
  * :class:~nativetypes.NativeEnvironment doesn't evaluate
    intermediate strings during rendering. This prevents early
    evaluation which could change the value of an expression.
    :issue:1186</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    Email matching requires a word character at the start of the domain part
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists</changelog>
  <changelog author="adrian@suse.de" date="1622462400">- update to 3.0.1
  Read the announcement:
    https://palletsprojects.com/blog/flask-2-0-released/
  Read the full list of changes:
    https://jinja.palletsprojects.com/changes/#version-3-0-0
- python-Jinja2-vim subpackage dropped
  vim highlight rule files do not exist anymore</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- updated upstream project URL</changelog>
  <changelog author="code@bnavigator.de" date="1625832000">- clean up single-spec: Remove python2 remnants</changelog>
  <changelog author="mmachova@suse.com" date="1628251200">- Babel is not required</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631275200">- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.</changelog>
  <changelog author="michael@stroeder.com" date="1633867200">- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
  * Fix a loop scoping bug that caused assignments in nested loops to still
    be referenced outside of it. #1427
  * Make compile_templates deterministic for filter and import names. #1452, #1453
  * Revert an unintended change that caused Undefined to act like
    StrictUndefined for the in operator. #1448
  * Imported macros have access to the current template globals in async
    environments. #1494
  * PackageLoader will not include a current directory (.) path segment.
    This allows loading templates from the root of a zip import. #1467</changelog>
  <changelog author="michael@stroeder.com" date="1636891200">- update to 3.0.3
  * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
  * Fix how the native environment treats leading and trailing spaces
    when parsing values on Python 3.10. (PR#1537)
  * Improve async performance by avoiding checks for common types. (#1514)
  * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
  * ``PackageLoader`` works when the package is a single module file. (#1512)</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- specfile:
  * update copyright year
  * require python-base &gt;= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
    "pass_context". "evalcontextfilter" and "evalcontextfunction"
    are replaced by "pass_eval_context".  "environmentfilter" and
    "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
    recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
    supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
    passing a context string as the first token in the tag, like "{%
    trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
    :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
    :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
    calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
    other comparison filters. Added the "case_sensitive" parameter
    to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
    result in "FileSystemLoader" and "PackageLoader" loading from
    drive-relative paths. :pr:`1621`</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`</changelog>
  <changelog author="kastl@b1-systems.de" date="1669982400">- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
  deprecated and will be removed in a future release.' error from
  pytest 7.2</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="979c3b1bca57544b8437d2c12f08d60f9902ae09549a3d7979f48f5fee6c35b0" name="python311-Jinja2" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="150400.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582027200">- update to 2.11.1
  * Fix a bug that prevented looking up a key after an attribute
  ({{ data.items[1:] }}) in an async template
  * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
  to support Python 2.7 and 3.5.
  * Added a new ChainableUndefined class to support getitem and getattr
  on an undefined object.
  * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
  * Added a default parameter for the map filter.
  * Exclude environment globals from meta.find_undeclared_variables().
  * Float literals can be written with scientific notation, like 2.56e-3.
  * Int and float literals can be written with the ‘_’ separator
  for legibility, like 12_345.
  * Fix a bug causing deadlocks in LRUCache.setdefault
  * The trim filter takes an optional string of characters to trim.
  * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
  the current context and available filters and tests.
  * Lexing templates with large amounts of whitespace is much faster.
  * Parentheses around comparisons are preserved, so {{ 2 * (3 &lt; 5) }} outputs
  “2” instead of “False”.
  * Add new boolean, false, true, integer and float tests.
  * The environment’s finalize function is only applied to the output of expressions
  (constant or not), not static template data.
  * When providing multiple paths to FileSystemLoader, a template can have
  the same name as a directory.
  * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
  expression, regardless of the environment’s undefined class. Omitting
  the else clause is a valid shortcut and should not raise an error when using
  StrictUndefined.
  * Fix behavior of loop control variables such as length and revindex0 when
  looping over a generator.
  * Async support is only loaded the first time an environment enables it,
  in order to avoid a slow initial import.
  * In async environments, the |map filter will await the filter call if needed.
  * In for loops that access loop attributes, the iterator is not advanced ahead
  of the current iteration unless length, revindex, nextitem, or last are accessed.
  This makes it less likely to break groupby results.
  * In async environments, the loop attributes length and revindex work for async iterators.
  * In async environments, values from attribute/property access will be awaited if needed.
  * PackageLoader doesn’t depend on setuptools or pkg_resources.
  * PackageLoader has limited support for PEP 420 namespace packages.
  * Support os.PathLike objects in FileSystemLoader and ModuleLoader
  * NativeTemplate correctly handles quotes between expressions. "'{{ a }}', '{{ b }}'"
  renders as the tuple ('1', '2') rather than the string '1, 2'.
  * Creating a NativeTemplate directly creates a NativeEnvironment instead
  of a default Environment.
  * After calling LRUCache.copy(), the copy’s queue methods point to the correct queue.
  * Compiling templates always writes UTF-8 instead of defaulting to the system encoding.
  * |wordwrap filter treats existing newlines as separate paragraphs to be wrapped
  individually, rather than creating short intermediate lines.
  * Add break_on_hyphens parameter to |wordwrap filter.
  * Cython compiled functions decorated as context functions will be passed the context.
  * When chained comparisons of constants are evaluated at compile time,
  the result follows Python’s behavior of returning False if any comparison
  returns False, rather than only the last one
  * Tracebacks for exceptions in templates show the correct line numbers
  and source for Python &gt;= 3.7.
  * Tracebacks for template syntax errors in Python 3 no longer show
  internal compiler frames
  * Add a DerivedContextReference node that can be used by extensions to get
  the current context and local variables such as loop
  * Constant folding during compilation is applied to some node types
  that were previously overlooked
  * TemplateSyntaxError.source is not empty when raised from an included template.
  * Passing an Undefined value to get_template (such as through extends, import,
  or include), raises an UndefinedError consistently. select_template will show
  the undefined message in the list of attempts rather than the empty string.
  * TemplateSyntaxError can be pickled.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582286400">- disable tests on 32bit archs</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Enable testing on other archs again
- Do not pull in py2 package on vim syntax</changelog>
  <changelog author="johannes.grassler@suse.com" date="1588593600">- update to 2.11.2
  * Fix a bug that caused callable objects with __getattr__, like
    :class:~unittest.mock.Mock to be treated as a
    :func:contextfunction. :issue:1145
  * Update wordcount filter to trigger :class:Undefined methods
    by wrapping the input in :func:soft_unicode. :pr:1160
  * Fix a hang when displaying tracebacks on Python 32-bit.
    :issue:1162
  * Showing an undefined error for an object that raises
    AttributeError on access doesn't cause a recursion error.
    :issue:1177
  * Revert changes to :class:~loaders.PackageLoader from 2.10 which
    removed the dependency on setuptools and pkg_resources, and added
    limited support for namespace packages. The changes caused issues
    when using Pytest. Due to the difficulty in supporting Python 2 and
    :pep:451 simultaneously, the changes are reverted until 3.0.
    :pr:1182
  * Fix line numbers in error messages when newlines are stripped.
    :pr:1178
  * The special namespace() assignment object in templates works in
    async environments. :issue:1180
  * Fix whitespace being removed before tags in the middle of lines when
    lstrip_blocks is enabled. :issue:1138
  * :class:~nativetypes.NativeEnvironment doesn't evaluate
    intermediate strings during rendering. This prevents early
    evaluation which could change the value of an expression.
    :issue:1186</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    Email matching requires a word character at the start of the domain part
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists</changelog>
  <changelog author="adrian@suse.de" date="1622462400">- update to 3.0.1
  Read the announcement:
    https://palletsprojects.com/blog/flask-2-0-released/
  Read the full list of changes:
    https://jinja.palletsprojects.com/changes/#version-3-0-0
- python-Jinja2-vim subpackage dropped
  vim highlight rule files do not exist anymore</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- updated upstream project URL</changelog>
  <changelog author="code@bnavigator.de" date="1625832000">- clean up single-spec: Remove python2 remnants</changelog>
  <changelog author="mmachova@suse.com" date="1628251200">- Babel is not required</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631275200">- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.</changelog>
  <changelog author="michael@stroeder.com" date="1633867200">- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
  * Fix a loop scoping bug that caused assignments in nested loops to still
    be referenced outside of it. #1427
  * Make compile_templates deterministic for filter and import names. #1452, #1453
  * Revert an unintended change that caused Undefined to act like
    StrictUndefined for the in operator. #1448
  * Imported macros have access to the current template globals in async
    environments. #1494
  * PackageLoader will not include a current directory (.) path segment.
    This allows loading templates from the root of a zip import. #1467</changelog>
  <changelog author="michael@stroeder.com" date="1636891200">- update to 3.0.3
  * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
  * Fix how the native environment treats leading and trailing spaces
    when parsing values on Python 3.10. (PR#1537)
  * Improve async performance by avoiding checks for common types. (#1514)
  * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
  * ``PackageLoader`` works when the package is a single module file. (#1512)</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- specfile:
  * update copyright year
  * require python-base &gt;= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
    "pass_context". "evalcontextfilter" and "evalcontextfunction"
    are replaced by "pass_eval_context".  "environmentfilter" and
    "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
    recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
    supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
    passing a context string as the first token in the tag, like "{%
    trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
    :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
    :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
    calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
    other comparison filters. Added the "case_sensitive" parameter
    to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
    result in "FileSystemLoader" and "PackageLoader" loading from
    drive-relative paths. :pr:`1621`</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`</changelog>
  <changelog author="kastl@b1-systems.de" date="1669982400">- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
  deprecated and will be removed in a future release.' error from
  pytest 7.2</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="248268c589efb0e196795e5210b8a405795f0056968e2c7444f2906f06fc55ca" name="python311-PyJWT" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="150400.8.7.2"/>
  <changelog author="arun@gmx.de" date="1530964800">- update to version 1.6.4:
  * Reverse an unintentional breaking API change to .decode() #352</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Add patch to build with python 3.7:
  * pyjwt-python37.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1543320000">- Add patch to fix testsuite with pytest 3.9.0:
  * pyjwt-pytest390.patch</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="hpj@urpla.net" date="1549281600">- update to version 1.7.1:
  * Update test dependencies with pinned ranges
  * Fix pytest deprecation warnings
- update to version v1.7.0:
  * Remove CRLF line endings #353
  * Update usage.rst #360
  * Support for Python 3.7 #375 #379 #384
- removed pyjwt-pytest390.patch (fixed upstream)
- removed pyjwt-python37.patch (fixed upstream)
- removed dos2unix conversion of jwt/__main__.py (fixed upstream)
- add test build conditional</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes and test calls</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571400000">- Fix build with ecdsa &gt;= 0.13.3, #447
  * 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch</changelog>
  <changelog author="dmueller@suse.com" date="1612180800">- update to 2.0.1:
  * Drop support for Python 2 and Python 3.0-3.5
  * Require cryptography &gt;= 3
  * Drop support for PyCrypto and ECDSA
  * Drop CLI
  * Improve typings
  * Dropped deprecated errors
  * Dropped deprecated ``verify_expiration`` param in ``jwt.decode(...)``
  * Dropped deprecated ``verify`` param in ``jwt.decode(...)``
  * Require explicit ``algorithms`` in ``jwt.decode(...)`` by default
  * Dropped deprecated ``require_*`` options in ``jwt.decode(...)``
  * Introduce better experience for JWKs
  * further details see included CHANGELOG.rst
- drop 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch (obsolete)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1614340800">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1621339200">- update to 2.1.0:
  - Allow claims validation without making JWT signature validation mandatory. `
  - Remove padding from JWK test data. `
  - Make `kty` mandatory in JWK to be compliant with RFC7517. `
  - Allow JWK without `alg` to be compliant with RFC7517. `
  - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `
  - Add caching by default to PyJWKClient `
  - Add missing exceptions.InvalidKeyError to jwt module __init__ imports `
  - Add support for ES256K algorithm `
  - Add `from_jwk()` to Ed25519Algorithm `
  - Add `to_jwk()` to Ed25519Algorithm `
  - Export `PyJWK` and `PyJWKSet`</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635940800">- Update to 2.3.0
  * Revert "Remove arbitrary kwargs." (#701)
  * Add exception chaining (#702)
- from version 2.2.0
  * Remove arbitrary kwargs. (#657)
  * Use timezone package as Python 3.5+ is required. (#694)
  * Assume JWK without the "use" claim is valid for signing
    as per RFC7517 (#668)
  * Prefer `headers["alg"]` to `algorithm` in `jwt.encode()`. (#673)
  * Fix aud validation to support {'aud': null} case. (#670)
  * Make `typ` optional in JWT to be compliant with RFC7519. (#644)
  * Remove upper bound on cryptography version. (#693)
  * Add support for Ed448/EdDSA. (#675)</changelog>
  <changelog author="mrueckert@suse.de" date="1654603200">- Update to 2.4.0 (CVE-2022-29217 boo#1199756)
  - Security
  - [CVE-2022-29217] Prevent key confusion through
    non-blocklisted public key formats. GHSA-ffqj-6fqr-9h24
  - Other changes:
  - Explicit check the key for ECAlgorithm by @estin in
    https://github.com/jpadilla/pyjwt/pull/713
  - Raise DeprecationWarning for jwt.decode(verify=...) by @akx
    in https://github.com/jpadilla/pyjwt/pull/742
  - Don't use implicit optionals by @rekyungmin in
    https://github.com/jpadilla/pyjwt/pull/705
  - documentation fix: show correct scope for decode_complete()
    by @sseering in https://github.com/jpadilla/pyjwt/pull/661
  - fix: Update copyright information by @kkirsche in
    https://github.com/jpadilla/pyjwt/pull/729
  - Don't mutate options dictionary in .decode_complete() by @akx
    in https://github.com/jpadilla/pyjwt/pull/743
  - Add support for Python 3.10 by @hugovk in
    https://github.com/jpadilla/pyjwt/pull/699
  - api_jwk: Add PyJWKSet.__getitem__ by @woodruffw in
    https://github.com/jpadilla/pyjwt/pull/725
  - Update usage.rst by @guneybilen in
    https://github.com/jpadilla/pyjwt/pull/727
  - Docs: mention performance reasons for reusing RSAPrivateKey
    when encoding by @dmahr1 in
    https://github.com/jpadilla/pyjwt/pull/734
  - Fixed typo in usage.rst by @israelabraham in
    https://github.com/jpadilla/pyjwt/pull/738
  - Add detached payload support for JWS encoding and decoding by
    @fviard in https://github.com/jpadilla/pyjwt/pull/723
  - Replace various string interpolations with f-strings by @akx
    in https://github.com/jpadilla/pyjwt/pull/744</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Drop CVE-2022-29217-non-blocked-pubkeys.patch in older dists
  since the issue was fixed upstream in version 2.4.0</changelog>
  <changelog author="michael@stroeder.com" date="1665316800">- Update to 2.5.0
  * Bump actions/checkout from 2 to 3 by @dependabot in #758
  * Bump codecov/codecov-action from 1 to 3 by @dependabot in #757
  * Bump actions/setup-python from 2 to 3 by @dependabot in #756
  * adding support for compressed payloads by @danieltmiles in #753
  * Revert "adding support for compressed payloads" by @auvipy in #761
  * Add to_jwk static method to ECAlgorithm by @leonsmith in #732
  * Remove redundant wheel dep from pyproject.toml by @mgorny in #765
  * Adjust expected exceptions in option merging tests for PyPy3 by @mgorny in #763
  * Do not fail when an unusable key occurs by @DaGuich in #762
  * Fixes for pyright on strict mode by @brandon-leapyear in #747
  * Bump actions/setup-python from 3 to 4 by @dependabot in #769
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #770
  * docs: fix simple typo, iinstance -&gt; isinstance by @timgates42 in #774
  * Expose get_algorithm_by_name as new method by @sirosen in #773
  * Remove support for python3.6 by @sirosen in #777
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #778
  * Emit a deprecation warning for unsupported kwargs by @sirosen in #776
  * Fix typo: priot -&gt; prior by @jdufresne in #780
  * Fix for headers disorder issue by @kadabusha in #721
  * Update audience typing by @JulianMaurin in #782
  * Improve PyJWKSet error accuracy by @JulianMaurin in #786
  * Add type hints to jwt/help.py and add missing types dependency by @kkirsche in #784
  * Add cacheing functionality for JWK set by @wuhaoyujerry in #781
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #788
  * Mypy as pre-commit check + api_jws typing by @JulianMaurin in #787
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #791
  * Bump version to 2.5.0 by @jpadilla in #801</changelog>
  <changelog author="yarunachalam@suse.com" date="1666872000">- Update to 2.6.0
  Changed
  * bump up cryptography &gt;= 3.4.0 by @jpadilla in #807
  * Remove types-cryptography from crypto extra by @lautat in #805
  Fixed
  * Invalidate token on the exact second the token expires #797
  * fix: version 2.5.0 heading typo by @c0state in #803
  Added
  * Adding validation for issued_at when iat &gt; (now + leeway) as ImmatureSignatureError by @sriharan16 in #794</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Clean up SPEC file.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1684497600">- update to version 2.7.0
  * Add classifier for Python 3.11 by @eseifert in #818
  * Add Algorithm.compute_hash_digest and use it to implement at_hash validation example by @sirosen in #775
  * fix: use datetime.datetime.timestamp function to have a milliseconds by @daillouf in #821
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #825
  * Custom header configuration in jwk client by @thundercat1 in #823
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #828
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #833
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #835
  * Add PyJWT._{de,en}code_payload hooks by @akx in #829
  * Add sort_headers parameter to api_jwt.encode by @evroon in #832
  * Make mypy configuration stricter and improve typing by @akx in #830
  * Bump actions/stale from 6 to 7 by @dependabot in #840
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #838
  * Add more types by @Viicos in #843
  * Differentiate between two errors by @irdkwmnsb in #809
  * Fix _validate_iat validation by @Viicos in #847
  * Improve error messages when cryptography isn't installed by @Viicos in #846
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #852
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #855
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #859
  * Make Algorithm an abstract base class by @Viicos in #845
  * docs: correct mistake in the changelog about verify param by @gbillig in #866
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #868
  * Bump actions/stale from 7 to 8 by @dependabot in #872
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #874
  * Add a timeout for PyJWKClient requests by @daviddavis in #875
  * Add client connection error exception by @daviddavis in #876
  * Add complete types to take all allowed keys into account by @Viicos in #873
  * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #878
  * Build and upload PyPI package by @jpadilla in #884
  * Fix for issue #862 - ignore invalid keys in a jwks. by @timw6n in #863
  * Add as_dict option to Algorithm.to_jwk by @fluxth in #881</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1693828800">- Update to version 2.8.0
  * Update python version test matrix by @auvipy in #895
  * Add ``strict_aud`` as an option to ``jwt.decode`` by @woodruffw in #902
  * Export PyJWKClientConnectionError class by @daviddavis in #887
  * Allows passing of ssl.SSLContext to PyJWKClient by @juur in #891
- Skip test_get_jwt_set_sslcontext_default test in testsuite</changelog>
</package>
<package pkgid="16a3317ec3ef805458d2cd4904e64b75cacd2c7332c5ce35837c0db8ed2a7606" name="python311-PyMySQL" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="150600.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 0.6.6:
    Add context manager to cursor
  * Fix can't encode blob that is not utf-8 on PY3. (regression of
    0.6.4, Thanks to @wiggzz)
- additional changes from version 0.6.4
  * Support "LOAD LOCAL INFILE".  Thanks @wraziens
  * Show MySQL warnings after execute query.
  * Fix MySQLError may be wrapped with OperationalError while
    connectiong. (#274)
  * SSCursor no longer attempts to expire un-collected rows within
    __del__, delaying termination of an interrupted program;
    cleanup of uncollected rows is left to the Connection on next
    execute, which emits a warning at that time. (#287)
  * Support datetime and time with microsecond. (#303)
  * Use surrogateescape to format bytes on Python 3.
  * OperationalError raised from connect() have information about
    original exception. (#304)
  * `init_command` now support multi statement.
  * `Connection.escape()` method now accepts second argument
    compatible to MySQL-Python.
- additional changes from version 0.6.3
  * Fixed multiple result sets with SSCursor.
  * Fixed connection timeout.
  * Fixed literal set syntax to work on Py2.6.
  * Allow for mysql negative values with 0 hour timedelta.
  * Added Connection.begin().
- additional changes from version 0.6.2
  * Fixed old password on Python 3.
  * Added support for bulk insert in Cursor.executemany().
  * Added support for microseconds in datetimes and dates before
    1900.
  * Several other bug fixes.
- additional changes from version 0.6.1
  * Added cursor._last_executed for MySQLdb compatibility
  * Cursor.fetchall() and .fetchmany now return list, not tuple
  * Allow "length of auth-plugin-data" = 0
  * Cursor.connection references connection object without weakref
- remove unwanted shebang of python files in test_MySQLdb</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458820800">- Update to 0.7.2
  * Fix misuse of `max_allowed_packet` parameter. (#426, #407 and #397)
  * Add %(name)s plceholder support to `Cursor.executemany()`. (#427, thanks to
    @WorldException)
- Update to 0.7.1
  * Fix auth fail with MySQL 5.1
  * Fix escaping unicode fails on Python 2
- Update to 0.7
  * Faster binary escaping
  * Add `"_binary" prefix` to string literal for binary types.
    binary types are: `bytearray` on Python 2, `bytes` and `bytearray` on Python 3.
    This is because recent MySQL show warnings when string literal is invalid for
    connection encoding.
  * `pymysql.Binary()` returns `bytearray` on Python 2.  This is required to distinguish
    binary and string.
  * Auth plugin support.
  * no_delay option is ignored.  It will be removed in PyMySQL 0.8.
- Update to 0.6.7
  * Allow self signed certificate
  * Add max_allowed_packet option
  * Fix error when bytes in executemany
  * Support geometry type
  * Add coveralls badge to README
  * Fix some bugs relating to warnings
  * Add Cursor.mogrify() method
  * no_delay option is deprecated and True by default
  * Fix options from my.cnf overrides options from arguments
  * Allow socket like object.  (It's not feature for end users)
  * Strip quotes while reading options from my.cnf file
  * Fix encoding issue in executemany()</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458820801">- Add license and docs</changelog>
  <changelog author="tbechtold@suse.com" date="1464955200">- update to 0.7.4:
  * Fix AttributeError may happen while Connection.__del__ (#463)
  * Fix SyntaxError in test_cursor. (#464)
  * frozenset support for query value. (#461)
  * Start using readthedocs.io
  * Add read_timeout and write_timeout option.
  * Support serialization customization by `conv` option.
  * Unknown type is converted by `str()`, for MySQLdb compatibility.
  * Support '%%' in `Cursor.executemany()`
  * Support REPLACE statement in `Cursor.executemany()`
  * Fix handling incomplete row caused by 'SHOW SLAVE HOSTS'.
  * Fix decode error when use_unicode=False on PY3
  * Fix port option in my.cnf file is ignored.</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.7.6:
  * Fix SELECT JSON type cause UnicodeError
  * Avoid float convertion while parsing microseconds
  * Warning has number
  * SSCursor supports warnings
  * Fix exception raised while importing when getpwuid() fails (#472)
  * SSCursor supports LOAD DATA LOCAL INFILE (#473)
  * Fix encoding error happen for JSON type (#477)
  * Fix test fail on Python 2.7 and MySQL 5.7 (#478)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502884800">- Implement single-spec version
- update to 0.7.11
  * Fixed Connection.close() failed when failed to send COM_CLOSE packet.
  * Cursor.executemany() accepts query ends with semicolon.
  * ssl parameters can be read from my.cnf.
- update to 0.7.10
  * **SECURITY FIX**: Raise RuntimeError when received LOAD_LOCAL packet while
    ``loacal_infile=False``.  (Thanks to Bryan Helmig)
  * Raise SERVER_LOST error for MariaDB's shutdown packet (#540)
  * Change default connect_timeout to 10.
  * Add bind_address option (#529)
- update to 0.7.9
  * Fix PyMySQL stop reading rows when first column is empty string (#513)
    Reverts DEPRECATE_EOF introduced in 0.7.7.
- update to 0.7.8
  * Revert error message change in 0.7.7.
    (SQLAlchemy parses error message, #507)
- update to 0.7.7
  * Add new unicode collation (#498)
  * Fix conv option is not used for encoding objects.
  * Experimental support for DEPRECATE_EOF protocol.</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- use %license instead of %doc [bsc#1082318]
- update to latest version to solve MySQLdb interface problems with
  salt-2018
- update to 0.8.1
  * Reduce `cursor.callproc()` roundtrip time. (#636)
  * Fixed `cursor.query()` is hunged after multi statement failed. (#647)
  * WRONG_DB_NAME and WRONG_COLUMN_NAME is ProgrammingError for now. (#629)
  * Many test suite improvements, especially adding MySQL 8.0 and using Docker.
  * Droppped support for old Python and MySQL whih is not tested long time.
- update to 0.8
  * **BACKWARD INCOMPATIBLE** ``binary_prefix`` option is added and off
  by default because of compatibility with mysqlclient.
  When you need PyMySQL 0.7 behavior, you have to pass ``binary_prefix=True``.
  (#549)
  * **BACKWARD INCOMPATIBLE** ``MULTI_STATEMENTS`` client flag is no longer
  set by default, while it was on PyMySQL 0.7.  You need to pass
  ``client_flag=CLIENT.MULTI_STATEMENTS`` when you connect to explicitly
  enable multi-statement mode. (#590)
  * Fixed AuthSwitch packet handling.
  * Raise OperationalError for MariaDB's constraint error. (#607)
  * executemany() accepts query without space between ``VALUES`` and ``(``.  (#597)
  * Support config file containing option without value. (#588)
  * Fixed Connection.ping() returned unintended value.</changelog>
  <changelog author="tchvatal@suse.com" date="1527163201">- Drop not really needed python-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 0.9.3:
  * cryptography dependency is optional now.
  * Fix old_password (used before MySQL 4.1) support.
  * Deprecate old_password.
  * Stop sending ``sys.argv[0]`` for connection attribute "program_name".
  * Close connection when unknown error is happened.
  * Deprecate context manager API of Connection object.
  * Disalbled unintentinally enabled debug log
  * Removed unintentionally installed tests
  * Fixed caching_sha2_password and sha256_password raise TypeError on PY2
    (#700, #702)
  * Change default charset from latin1 to utf8mb4.  (because MySQL 8 changed) (#692)
  * Support sha256_password and caching_sha2_password auth method (#682)
  * Add cryptography dependency, because it's needed for new auth methods.
  * Remove deprecated `no_delay` option (#694)
  * Support connection attributes (#679)
  * Map LOCK_DEADLOCK to OperationalError (#693)</changelog>
  <changelog author="pgajdos@suse.com" date="1591272000">- test package with mariadb
- added patches
  https://github.com/PyMySQL/PyMySQL/commit/a500fcd64d4500417540a2a2ff7b16a88d1872ad
  + python-PyMySQL-no-unittest2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 0.10.0:
  * MariaDB ed25519 auth is supported.
  * Python 3.4 support is dropped.
  * Context manager interface is removed from `Connection`. It will be added
    with different meaning.
  * MySQL warnings are not shown by default because many user report issue to
    PyMySQL issue tracker when they see warning. You need to call "SHOW WARNINGS"
    explicitly when you want to see warnings.
  * Formatting of float object is changed from "3.14" to "3.14e0".
  * Use cp1252 codec for latin1 charset.
  * Fix decimal literal.
  * TRUNCATED_WRONG_VALUE_FOR_FIELD, and ILLEGAL_VALUE_FOR_TYPE are now
    DataError instead of InternalError.
- remove python-PyMySQL-no-unittest2.patch (upstream)</changelog>
  <changelog author="hpj@urpla.net" date="1600862400">- disable testing for Leaps
  mariadb-rpm-macros not available or not sufficient</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- udpate to 0.10.1:
  * Fix missing import of ProgrammingError. (#878)
  * Fix auth switch request handling. (#890)</changelog>
  <changelog author="dmueller@suse.com" date="1619092800">- update to 1.0.2:
  * Fix `user`, `password`, `host`, `database` are still positional arguments.
    All arguments of `connect()` are now keyword-only. (#941)
  * Stop emitting DeprecationWarning for use of ``db`` and ``passwd``.
    Note that they are still deprecated. (#939)
  * Add ``python_requires="&gt;=3.6"`` to setup.py. (#936)
  * Python 2.7 and 3.5 are not supported.
  * ``connect()`` uses keyword-only arguments. User must use keyword argument.
  * ``connect()`` kwargs ``db`` and ``passwd`` are now deprecated; Use ``database`` and ``password`` instead.
  * old_password authentication method (used by MySQL older than 4.1) is not supported.
  * MySQL 5.5 and MariaDB 5.5 are not officially supported, although it may still works.
  * Removed ``escape_dict``, ``escape_sequence``, and ``escape_string`` from ``pymysql``
    module. They are still in ``pymysql.converters``.
  * Connection supports context manager API. ``__exit__`` closes the connection. (#886)
  * Add MySQL Connector/Python compatible TLS options (#903)
  * Major code cleanup; PyMySQL now uses black and flake8.</changelog>
  <changelog author="mcepl@suse.com" date="1627473600">- Fix databases.json used for tests.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1665662400">- Skip a test that is failing due to character set fun and games.</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 1.0.3:
  * Dropped support of end of life MySQL version 5.6
  * Dropped support of end of life MariaDB versions below 10.3
  * Dropped support of end of life Python version 3.6</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690977600">- disable test_json broken with latest mariadb (11.0)
- update to 1.1.0:
  * Remove redundant wheel dep from pyproject.toml by @mgorny in #1099
  * ci: Fix black options by @methane in #1109
  * Remove unused function by @methane in #1108
  * Expose Cursor.warning_count by @Nothing4You in #1056
  * Add constants and tests related to query timeouts by @Nothing4You in #1033
  * Fix SSCursor raising query timeout error on wrong query on MySQL DB by @Nothing4You in #1035
  * Make Cursor an iterator by @sanchezg in #995
  * ci: Update CodeQL workflow by @methane in #1110
  * Use Ruff instead of flake8 by @methane in #1112
  * Use Codecov instead of coveralls. by @methane in #1113
  * optionfile: Replace _ with - by @methane in #1114
  * Cursor.fetchall() always return list. by @methane in #1115
  * Fix LOAD DATA LOCAL INFILE write EOF packet on closed connection. by @methane in #1116
  * Deprecate Cursor.Error access by @methane in #1117
  * Run pyupgrade by @methane in #1118
  * Add collation option and set_character_set() to Connection by @methane in #1119
  * CI: Run Django test by @methane in #1121
  * Release v1.1.0rc1 by @methane in #1122
  * Bump mariadb version by @grooverdan in #1123
  * Configure Renovate by @renovate in #1124
  * Make charset="utf8" use utf8mb4. by @methane in #1127
  * Add codecov.yml by @methane in #1128
  * Release v1.1.0rc2 by @methane in #1129
  * Release v1.1.0 by @methane in #1130</changelog>
  <changelog author="ecsos@opensuse.org" date="1692187200">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="daniel.garcia@suse.com" date="1716552000">- Add CVE-2024-36039.patch, forbid dict parameter
  (bsc#1225070, gh#PyMySQL/PyMySQL@521e40050cb3)</changelog>
</package>
<package pkgid="1fdbaf73b24ad1df4bf818852eae206ce11af57fd2d5ccde7b6f0330a3f8a067" name="python311-Pygments" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="150400.7.7.4"/>
  <changelog author="benoit.monin@gmx.fr" date="1599998400">- update to version 2.7.0:
  * Added lexers:
    + Arrow (PR#1481, PR#1499)
    + BARE (PR#1488)
    + Devicetree (PR#1434)
    + F* (PR#1409)
    + GDScript (PR#1457)
    + Pointless (PR#1494)
    + PromQL (PR#1506)
    + PsySH (PR#1438)
    + Singularity (PR#1285)
    + TiddlyWiki5 (PR#1390)
    + TNT (PR#1414)
    + YANG (PR#1408, PR#1428)
  * Updated lexers:
    + APL (PR#1503)
    + C++ (PR#1350, which also fixes: #1222, #996, #906, #828,
    [#1162], #1166, #1396)
    + Chapel (PR#1423)
    + CMake (#1491)
    + CSound (#1509)
    + Cython (PR#1507)
    + Dart (PR#1449)
    + Fennel (PR#1535)
    + Fortran (PR#1442)
    + GAS (PR#1530)
    + HTTP (PR#1432, #1520, PR#1521)
    + Inform 6 (PR#1461)
    + Javascript (PR#1533)
    + JSON (#1065, PR#1528)
    + Lean (PR#1415)
    + Matlab (PR#1399)
    + Markdown (#1492, PR#1495)
    + MySQL (#975, #1063, #1453, PR#1527)
    + NASM (PR#1465)
    + Nim (PR#1426)
    + PostgreSQL (PR#1513)
    + PowerShell (PR#1398, PR#1497)
    + Protobuf (PR#1505)
    + Robot (PR#1480)
    + SQL (PR#1402)
    + SystemVerilog (PR#1436, PR#1452, PR#1454, PR#1460, PR#1462,
    PR#1463, PR#1464, PR#1471, #1496, PR#1504)
    + TeraTerm (PR#1337)
    + XML (#1502)
  * Added a new filter for math symbols (PR#1406)
  * The Kconfig lexer will match Kconfig derivative names now
    (PR#1458)
  * Improved HTML formatter output (PR#1500)
  * .markdown is now recognized as an extension for Markdown files
    (PR#1476)
  * Fixed line number colors for Solarized (PR#1477, #1356)
  * Improvements to exception handling (PR#1478)
  * Improvements to tests (PR#1532, PR#1533, PR#1539)
  * Various code cleanups (PR#1536, PR#1537, PR#1538)
- remove unnecessary executable bit on all source files</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1600344000">- update to version 2.7.1:
  * Fixed a regression in the JSON lexer (#1544)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1603540800">- update to version 2.7.2:
  * Updated lexers:
    + Latex (PR#1517, #1516)
    + LLVM (PR#1565)
    + SPARQL (PR#1559)
  * Fixed Python console/traceback lexer problems with custom
    exceptions without messages (#1548)
  * Allow loading ttc fonts on Mac/image formatter (#1223)
  * Improve analyze_text across a variety of lexers (PR#1549)
  * Removed CSS rule which forced the vertical padding to 0 for
    line numbers (PR#1583, #1579)
  * Fix TNTLexer crashing on unexpected EOL (#1568, PR#1570)
  * regexlint can be now run locally as part of tox tests (PR#1557)
  * Fix typos (PR#1550, #1562)
  * Add Python 3.9 as a supported version (PR#1554)
- drop shebang removal in _usd_builtins.py: fixed upstream</changelog>
  <changelog author="mcepl@suse.com" date="1607083200">- Revert to 2.6.1 (higher version break python-Pelican).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Update to 2.7.4 (all what was in the update to 2.7.2 and above
  it) (CVE-2021-20270, bsc#1183169, CVE-2021-27291, bsc#1184812):
  * drops cve_2021_20270.patch, cve_2021_27291.patch in older dists
  - Updated lexers:
  * Ada (#1581)
  * HTML (#1615, #1614)
  * Java (#1594, #1586)
  * JavaScript (#1605, #1589, #1588)
  * JSON (#1569 -- this is a complete rewrite)
  * Lean (#1601)
  * LLVM (#1612)
  * Mason (#1592)
  * MySQL (#1555, #1551)
  * Rust (#1608)
  * Turtle (#1590, #1553)
  - Deprecated JsonBareObjectLexer, which is now identical to
    JsonLexer (#1600)
  - The ``ImgFormatter`` now calculates the exact character
    width, which fixes some issues with overlapping text (#1213,
    [#1611])
  - Documentation fixes (#1609, #1599, #1598)
  - Fixed duplicated Juttle language alias (#1604, #1606)
  - Added support for Kotlin scripts (#1587)
  - Removed CSS rule which forced margin to 0</changelog>
  <changelog author="mcepl@suse.com" date="1626350400">- Update to 2.9.0:
  - This time the list of changes is truly too long, take a look
    at https://github.com/pygments/pygments/blob/master/CHANGES.</changelog>
  <changelog author="schubi@suse.de" date="1631188800">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="mliska@suse.cz" date="1641211200">- Update to 2.11.1:
  https://github.com/pygments/pygments/blob/master/CHANGES
- Remove one test as it requires wcag-contrast-ratio Python package.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1641988800">- update to 2.11.2:
  * Updated lexers:
    + C-family: Fix incorrect handling of labels (#2022, #1996,
    [#1182])
    + Java: Fixed an issue with record keywords result in Error
    tokens in some cases (#2018)
  * Fix links to line numbers not working correctly (#2014)
  * Remove underline from Whitespace style in the Tango theme
    (#2020)
  * Fix IRC and Terminal256 formatters not backtracking correctly
    for custom token types, resulting in some unstyled tokens
    (#1986)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1644148800">- backport elpi_fix_catastrophic_backtracking.patch:
  fix build getting stuck when running the tests
- switch prep stage to autosetup
- remove commented-out shebang removal</changelog>
  <changelog author="dmueller@suse.com" date="1652616000">- update to 2.12.0:
  - Added lexers:
  * Cplint (#2045)
  * Macaulay2 (#1791)
  * Minecraft (#2107)
  * Qlik (#1925)
  * ``UnixConfigLexer`` for "colon-separated" config files, like ``/etc/passwd`` (#2112)
  - Updated lexers:
  * Agda: Update keyword list (#2017)
  * C family: Fix identifiers after ``case`` statements (#2084)
  * Clojure: Highlight ratios (#2042)
  * Csound: Update to 6.17 (#2064)
  * CSS: Update the list of properties (#2113)
  * Elpi:
  - Fix catastrophic backtracking (#2053, #2061)
  - Fix handling of ``-&gt;`` (#2028)
  * Futhark: Add missing tokens (#2118)
  * Gherkin: Add ``But`` (#2046)
  * Inform6: Update to 6.36 (#2050)
  * LilyPond:
  - Fix incorrect lexing of names containing a built-in (#2071)
  - Fix properties containing dashes (#2099)
  * PHP: Update builtin function and keyword list (#2054, #2056)
  * Scheme: Various improvements (#2060)
  * Spice: Update the keyword list, add new types (#2063, #2067)
  * Terraform:
  - Support non-idiomatic comments (#2065, #2066)
  - Fix class name lexing (#2097)
  - Add ``plugins`` argument to ``get_all_lexers()``.
  - Bump minimal Python version to 3.6 (#2059)
  - Fix multiple lexers marking whitespace as ``Text`` (#2025)
  - Remove various redundant uses of ``re.UNICODE`` (#2058)
  - Associate ``.resource`` with the Robot framework (#2047)
  - Associate ``.cljc`` with Clojure (#2043)
  - Associate ``.tpp`` with C++ (#2031)
  - Remove traces of Python 2 from the documentation (#2039)
  - The ``native`` style was updated to meet the WCAG AAA contrast guidelines (#2038)
  - Fix various typos (#2030)
  - Fix ``Groff`` formatter not inheriting token styles correctly (#2024)
  - Various improvements to the CI (#2036)
  - The Ada lexer has been moved to a separate file (#2117)
- drop elpi_fix_catastrophic_backtracking.patch: upstream</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Don't fall back to setuptools but to importlib-metadata for
  plugin loading. (If a package for 15.X would be build, but
  Pytest 7 is required for testing -- gh#pygments/pygments#2080)</changelog>
  <changelog author="mcepl@suse.com" date="1658145600">- Removing a test file is too much a hack for me</changelog>
  <changelog author="mcepl@suse.com" date="1658145601">- Add BR of wcag-contrast-ratio to enable more tests.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1660824000">- update to 2.13.0:
  * Added lexers:
    + COMAL-80 (#2180)
    + JMESPath (#2174, #2175, #2179, #2182)
    + Sql+Jinja (#2148)
  * Updated lexers:
    + Ada: support Ada 2022 (#2121); disable recognition of
    namespaces because it disturbs lexing of aspects (#2125)
    + Agda: allow straight quotes in module names (#2163)
    + C family (C, C++ and many others): allow comments between
    elements of function headers, e.g. between the arguments and
    the opening brace for the body (#1891)
    + C++: Resolve several cases of Error tokens (#2207, #2208)
    + Coq: add some common keywords, improve recognition of Set and
    qualified identifiers (#2158)
    + F*: Allow C-style comments anywhere in a line
    + Fortran: fix catastrophic backtracking with backslashes in
    strings (#2194)
    + Go: add support for generics (#2167)
    + Inform: update for version 6.40 (#2190)
    + Isabelle: recognize cartouches (#2089)
    + Java: support multiline strings aka. text blocks (#2132)
    + Kotlin: add value modifier (#2142)
    + LilyPond: add some missing builtins
    + Macaulay2: update builtins (#2139)
    + Matlab session: fix traceback when a line continuation
    ellipsis appears in the output (#2166)
    + .NET: add aliases for LibreOffice Basic, OpenOfficeBasic and
    StarOffice Basic (#2170)
    + Nim: use Name.Builtin instead of Keyword.Type (#2136)
    + PHP: fix \"$var\" inside strings (#2105)
    + Python: only recognize \N, \u and \U escape sequences in
    string literals, but not in bytes literals where they are not
    supported (#2204)
    + Tcl: support ${name} variables (#2145)
    + Terraform: accept leading whitespace for &lt;&lt; heredoc
    delimiters (#2162)
    + Teraterm: Various improvements (#2165)
    + Spice: add support for the recently added features including
    more builtin functions and bin, oct, hex number formats
    (#2206)
  * Added styles:
    + GitHub dark (#2192)
    + StarOffice (#2168)
    + Nord (nord and nord-darker; #2189, #1799, #1678)
  * Pygments now tries to use the importlib.metadata module to
    discover plugins instead of the slower pkg_resources (#2155).
  * Silently ignore BrokenPipeError in the command-line interface
    (#2193).
  * The HtmlFormatter now uses the linespans attribute for
    anchorlinenos if the lineanchors attribute is unset (#2026).
  * The highlight, lex and format functions no longer wrongly
    report "argument must be a lexer/formatter instance, not a
    class" in some cases where this is not the actual problem
    (#2123).
  * Fix warnings in doc build (#2124).
  * The codetagify filter now recognizes FIXME tags by default
    (#2150).
  * The pygmentize command now recognizes if the COLORTERM
    environment variable is set to a value indicating that
    true-color support is available.  In that case, it uses the
    TerminalTrueColorFormatter by default (#2160)
  * Remove redundant caches for filename patterns (#2153)
  * Use new non-deprecated Pillow API for text bounding box in
    ImageFormatter (#2198)
  * Remove default_style (#930, #2183)
  * Stop treating DeprecationWarnings as errors in the unit tests
    (#2196)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1672660800">- update to 2.14.0:
  * Added lexers:
    + Arturo (#2259)
    + GAP session (#2211)
    + Fift (#2249)
    + func (#2232)
    + Jsonnet (#2239)
    + Minecraft schema (#2276)
    + MIPS (#2228)
    + Phix (#2222)
    + Portugol (#2300)
    + TL-b (#2247)
    + World of Warcraft TOC format (#2244, #2245)
    + Wren (#2271)
  * Updated lexers:
    + Abap: Update keywords (#2281)
    + Alloy: Update for Alloy 6 (#1963)
    + C family (C, C++ and many others):
  - Fix an issue where a chunk would be wrongly recognized as a
    function definition due to braces in comments (#2210)
  - Improve parantheses handling for function definitions
    (#2207, #2208)
    + C#: Fix number and operator recognition (#2256, #2257)
    + CSound: Updated builtins (#2268)
    + F#: Add .fsx file extension (#2282)
    + gas (GNU assembler): recognize braces as punctuation (#2230)
    + HTTP: Add CONNECT keyword (#2242)
    + Inform 6: Fix lexing of properties and doubles (#2214)
    + INI: Allow comments that are not their own line
    (#2217, #2161)
    + Java properties: Fix issue with whitespace-delimited keys,
    support comments starting with ! and escapes, no longer
    support undocumented ; and // comments (#2241)
    + LilyPond: Improve heuristics, add \maxima duration (#2283)
    + LLVM: Add opaque pointer type (#2269)
    + Macaulay2: Update keywords (#2305)
    + Minecraft-related lexers (SNB and Minecraft function) moved
    to pygments.lexers.minecraft (#2276)
    + Nim: General improvements (#1970)
    + Nix: Fix single quotes inside indented strings (#2289)
    + Objective J: Fix catastrophic backtracking (#2225)
    + NASM: Add support for SSE/AVX/AVX-512 registers as well as
    'rel' and 'abs' address operators (#2212)
    + Powershell:
  - Add local: keyword (#2254)
  - Allow continuations without markers (#2262, #2263)
    + Solidity: Add boolean operators (#2292)
    + Spice: Add enum keyword and fix a bug regarding binary,
    hexadecimal and octal number tokens (#2227)
    + YAML: Accept colons in key names (#2277)
  * Fix make mapfiles when Pygments is not installed in editable
    mode (#2223)
  * Support more filetypes and compression types in autopygmentize
    (#2219)
  * Merge consecutive tokens in Autohotkey, Clay (#2248)
  * Add .nasm as a recognized file type for NASM (#2280)
  * Add *Spec.hs as a recognized file type for HSpec (#2308)
  * Add *.pyi (for typing stub files) as a recognized file type for
    Python (#2331)
  * The HTML lexer no longer emits empty spans for whitespace
    (#2304)
  * Fix IRCFormatter inserting linenumbers incorrectly (#2270)
- set minimum python version to 3.6:
  increased upstream -- gh#pygments/pygments#2059
- remove lxml BuildRequires:
  dropped upstream -- gh#pygments/pygments#2301
- remove skip_python2: python &gt;= 3.6 is already required
- drop python_module macro definition: provided by
  python-rpm-macros</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1681128000">- update to 2.15.0:
  * Added lexers:
    + Carbon (#2362, #2365, #2366, #2367, #2368, #2369, #2370)
    + Dax (#2335, #2345)
    + MediaWiki Wikitext (#2373, #827)
    + PostgreSQL Explain (#2398)
    + WGSL (WebGPU Shading Language) (#2386)
    + X++ (#2339)
  * Updated lexers:
    + AMDGPU: Add support for scratch_ instructions, the attr*.*
    argument, as well as the off modifier (#2327).
    + APDL: Miscellaneous improvements (#2314)
    + bash/tcsh:
  - Move break to keywords (#2377)
  - Improve bash math expansion lexing (#2255, #2353)
    + Chapel: Support attributes (#2376)
    + CMake: Implement bracket style comments (#2338, #2354)
    + CSS: Improve lexing of numbers inside function calls (#2382,
    [#2383])
    + diff: Support normal diff syntax, as opposed to unified diff
    syntax (#2321)
    + GLSL, HLSL:
  - Support line continuations in preprocessor code (#2350)
  - Improve preprocessor directive handling (#2357)
    + LilyPond: minor update of builtins
    + PHP: support attributes (#2055, #2347, #2360), fix anonymous
    classes without parameters (#2359), improve lexing of
    variable variable syntax (#2358)
    + Python:
  - Add missing builtins (#2334)
  - Fix inconsistent lexing of None (#2406)
    + Rebol/Red: Don’t require script headers (#2348, #2349)
    + Spice: Update keywords (#2336)
    + SQL+Jinja (analyse_text method): Fix catastrophic
    backtracking (#2355)
    + Terraform: Add hcl alias (#2375)
  * Declare support for Python 3.11 and drop support for Python 3.6
    (#2324).
  * Update native style to improve contrast (#2325).
  * Update github-dark` style to match latest Primer style (#2401)
  * Revert a change that made guessing lexers based on file names
    slower on Python 3.10 and older (#2328).
  * Fix some places where a locale-dependent encoding could
    unintentionally be used instead of UTF-8 (#2326).
  * Fix Python traceback handling (#2226, #2329).
  * Groff formatter: sort color definitions for reproducibility
    (#2343)
  * Move project metadata to pyproject.toml, remove setup.py and
    setup.cfg (#2342)
  * The top-level Makefile has been removed.
- increase required python version to 3.7
- set a minimum version for setuptools to match the requirement
  from upstream
- since setup.py is gone:
  * require pip and wheel to build
  * use pyproject macros to build and install</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1681905600">- update to 2.15.1:
  * Updated lexers:
    + Java properties: Fix catastrophic backtracking (#2356, #2404)
  * Fix Python console traceback lexing being too strict
    and sometimes reordering output (#2407, #2410, #2412)</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="c62524b52e2f72c58e6d630c0f9a2976efedc872fea62a03c34602d1cc9939a2" name="python311-Twisted" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="0c5912b2e0868aff82584a158470a5b39b3a16dd3f7e062c51d9c9736eaf0d79" name="python311-Twisted" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="5099a867338e667eb6bb00338d8ed8f7c424d044ab6379efc5023db776cfb943" name="python311-Twisted-all_non_platform" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="8015fee23b7ca654c058951a84952edb4525bee620665f76a806d2a6614e45eb" name="python311-Twisted-all_non_platform" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="d32b1fe1efeca0753eceb02c21f8fe13cba13285dcfe116f880f602a3b6cd9b4" name="python311-Twisted-conch" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="69a7689c41cc31868fb6150aa1bced269955b1c2513d9244ce61e7002dcc6d42" name="python311-Twisted-conch" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="0d641a1c1a426898d27ddd3885265d6657befd76ed509c8ef93aee8dd99f2a1c" name="python311-Twisted-conch_nacl" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="cdb30719bc7e8203d4b0c1eb2348eafede1d834b960897a0eb46d4f77f8106e2" name="python311-Twisted-conch_nacl" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="3941e685edbb6ae18cde463a7bd292fa04cea8c6ca59d0e77aaa3f8c0f3a3a0b" name="python311-Twisted-contextvars" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="9d47ecad95da5e7534d27b664dac40db25f9030f4efaedd4ea19a837c602e7f1" name="python311-Twisted-contextvars" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="e54f95b3f892c8f6c07cf0418249131903f2b372524203466c1e9ec98e4633c7" name="python311-Twisted-http2" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="8095bfc64a6fc8209e54dcd3b4617ddddecbd7f8f2296ec1288d7cfb19742380" name="python311-Twisted-http2" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="f7b92b45fe3dfb085feb103bac03b42d63793669b68cbad62f88d9c55453ec16" name="python311-Twisted-serial" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="a0d0e404c2b2e7c5731ebd389aea1aeebcdf1f6909c484c49973a1efd995d1df" name="python311-Twisted-serial" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="17cdba68f8437e5522d1085be570c1643baa1ce84895e8beadeb0d52202d476c" name="python311-Twisted-tls" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.17.4"/>
  <changelog author="qydwhotmail@gmail.com" date="1630497600">- Remove h2 &lt; 4.0 and priority &lt; 2.0 version restriction. (boo#1190036)
  * remove-dependency-version-upper-bounds.patch</changelog>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
</package>
<package pkgid="97606b07f1c9d2154aabba9a4bbdefd625c937c218f7ad36db9b640e4d98f7f8" name="python311-Twisted-tls" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.5.20.1"/>
  <changelog author="code@bnavigator.de" date="1639051200">- Drop true-binary.patch which is not compatible with python310
- Some rpmlint cleanup:
  * Deduplicate docs
  * Remove she-bangs in test files
  * Remove empty doc files
  * Filter test certificate warning</changelog>
  <changelog author="code@bnavigator.de" date="1639137600">- Fix Source tags</changelog>
  <changelog author="steven.kowalik@suse.com" date="1641470400">- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.</changelog>
  <changelog author="mrueckert@suse.de" date="1644408000">- Update to 22.1.0: (boo#1195667)
  - CVE-2022-21712 / GHSA-92x2-jw7w-xvvx
    twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Python 3.10 is now a supported platform (#10224)
  - Type annotations have been added to the twisted.python.fakepwd
    module. (#10287)
  - twisted.internet.defer.inlineCallbacks has an improved type
    annotation, to avoid typing errors when it is used on a
    function which returns a non-None result. (#10231)
  - twisted.internet.base.DelayedCall.__repr__ and
    twisted.internet.task.LoopingCall.__repr__ had the changes from
    [#10155] reverted to accept non-function callables. (#10235)
  - Revert the removal of .whl building that was done as part of
    [#10177]. (#10236)
  - The type annotation of the host parameter to
    twisted.internet.interfaces.IReactorTCP.connectTCP has been
    corrected from bytes to str. (#10251)
  - Deprecated twisted.python.threading.ThreadPool.currentThread()
    in favor of threading.current_thread().
  - Switched twisted.python.threading.ThreadPool.currentThread()
    and twisted.python.threadable.getThreadID() to use
    `threading.current_thread()to avoid the deprecation warnings
    introduced forthreading.currentThread()`` in Python 3.10.
    (#10273)
  - twisted.internet.utils.runWithWarningsSupressed behavior of
    waiting on deferreds has been documented. (#10238)
  - Sync API docs templates with pydoctor 21.9.0 release, using new
    theming capabilities. (#10267)
  - #1681, #9944, #10198, #10218, #10219, #10228, #10229, #10234,
    [#10239], #10240, #10245, #10246, #10248, #10250, #10255, #10277,
    [#10288], #10292
  - twisted.conch.ssh now supports SSH extension negotiation (RFC
    8308). (#10266)
  - twisted.conch now uses constant-time comparisons for MACs.
    (#8199)
  - twisted.conch.ssh.filetransfer.FileTransferServer will now
    return an ENOENT error status if an SFTP client tries to close
    an unrecognized file handle. (#10293)
  - SSHTransportBase.ssh_KEXINIT now uses the remote peer preferred
    MAC list for negotiation. In previous versions it was only
    using the local preferred MAC list. (#10241)
  - twisted.web.client.RedirectAgent and
    twisted.web.client.BrowserLikeRedirectAgent now properly remove
    sensitive headers when redirecting to a different origin.
    (#10294)
  - Add type annotations for twisted.web.client.readBody. (#10269)
  - twisted.web.client.getPage, twisted.web.client.downladPage, and
    the associated implementation classes (HTTPPageGetter,
    HTTPPageDownloader, HTTPClientFactory, HTTPDownloader) have
    been removed because they do not segregate cookies by domain.
    They were deprecated in Twisted 16.7.0 in favor of
    twisted.web.client.Agent. GHSA-92x2-jw7w-xvvx. (#10295)
  - trial.runner.filenameToModule now sets the correct
    module.__name__ and sys.modules key (#10230)</changelog>
  <changelog author="mrueckert@suse.de" date="1644408001">- Add 9580-test_fails_cryptography_25.patch to overcome test failures on
  SLE-15 with older version of OpenSSL.
- refreshed patches
  - 1521_delegate_parseqs_stdlib_bpo42967.patch
  - currentThread-deprecated.patch
  - no-cython_test_exception_raiser.patch
  - no-pygtkcompat.patch
  - no-test_successResultOfWithFailureHasTraceback.patch
  - remove-dependency-version-upper-bounds.patch
  - skip_MultiCast.patch
- remove upstreamed patches
  currentThread-deprecated.patch
- remove tests from the package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645617600">- Remove 9580-test_fails_cryptography_25.patch which is not
  necessary with changes in OpenSSL</changelog>
  <changelog author="mcepl@suse.com" date="1648123200">- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649332800">- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
    twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
    raises TypeError when there are no delayed called. This was a
    regression introduced with the migration to Python 3 in which the
    builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
    remote peer if the SSH version string is not sent in the first
    4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
    deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Do not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP
    request smuggling. (CVE-2022-24801, bsc#1198086)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1651665600">- Stop removing test directories, it also removes a public module.
  (bsc#1198852, bsc#1198854, bsc#1198855)</changelog>
  <changelog author="code@bnavigator.de" date="1655812800">- Update to 22.4.0
  * twisted.python.failure.Failure tracebacks now capture module
    information, improving compatibility with the Raven Sentry
    client. (#7796)
  * twisted.python.failure.Failure objects are now compatible with
    dis.distb, improving compatibility with post-mortem debuggers.
    (#9599)
  * twisted.internet.interfaces.IReactorSSL.listenSSL now has
    correct type annotations. (#10274)
  * twisted.internet.test.test_glibbase.GlibReactorBaseTests now
    passes. (#10317)
  * Conch
  - twisted.conch.ssh now supports using RSA keys with SHA-2
    signatures (RFC 8332) when acting as a server.  The
    rsa-sha2-512 and rsa-sha2-256 public key signature algorithms
    are automatically preferred over ssh-rsa if the client
    advertises support for them; the actual public keys do not
    need to change. (#9765)
  - twisted.conch.ssh now has an alternative Ed25519
    implementation using PyNaCl, in order to support platforms
    that lack OpenSSL &gt;= 1.1.1b.  The new "conch_nacl" extra has
    the necessary dependency. (#10208)
  * Web
  - Twisted is now compatible with h2 4.x.x. (#10182)
  - twisted.web.http had several several defects in HTTP request
    parsing that could permit HTTP request smuggling. It now
    disallows signed Content-Length headers, forbids illegal
    characters in chunked extensions, forbids a ``0x`` prefix to
    chunk lengths, and only strips spaces and horizontal tab
    characters from header values. These changes address
    CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323)
  * Mail
  - twisted.mail.pop3.APOPCredentials is now correctly marked as
    implementing twisted.cred.credentials.IUsernamHashedPassword,
    rather than IUsernamePassword. (#10305)
  * Trial
  - `trial --until-failure --jobs=N` now reports the number of
    each test pass as it begins. (#10312)
  - twisted.trial.unittest.TestCase now discards cleanup
    functions after running them. Notably, this prevents them
    from being run an ever growing number of times with trial -u
    .... (#10320)
- Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream
- Refresh remove-dependency-version-upper-bounds.patch
- Move extra_requires optional dependencies to meta sub packages
- Create :test multibuild flavor</changelog>
  <changelog author="steven.kowalik@suse.com" date="1667304000">- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
    result as asynchronous operation and return a Deferred that fires with
    the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
    result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
    is a more reliable mechanism for choosing among several inherited
    descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
    AttributeError if the DelayedCall was created before debug mode was
    enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
    now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
    when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
    StopIteration tracebacks to be added to the top of tracebacks
    originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
    type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
    and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
    with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
    parisc, powerpc and sparc architectures.
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
    error. (bsc#1204781, CVE-2022-39348)
    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists
  * Deprecations and Removals
    + Python 3.6 is no longer supported.
    + Twisted 22.4.0 was the last version with support for Python 3.6.
    + twisted.protocols.dict, which was deprecated in 17.9, has been removed.
- Remove Python 3.6 Requires.
- Drop patch skip-namespacewithwhitespace.patch, no longer required.
- Refresh all patches.</changelog>
  <changelog author="mcepl@suse.com" date="1669032000">- Skip rpmlint error python-tests-in-package.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673352000">- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733</changelog>
  <changelog author="steven.kowalik@suse.com" date="1675857600">- Add patch support-new-glibc.patch:
  * Support new glibc changes.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package.</changelog>
  <changelog author="dmueller@suse.com" date="1687780800">- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions</changelog>
  <changelog author="mcepl@cepl.eu" date="1700049600">- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715342400">- Fix update-alternatives post script, bsc#1224109</changelog>
</package>
<package pkgid="eda88e211f5e3ff92910b10b0807a5add887ff4196d3a6e0b6647e69e39122c3" name="python311-Werkzeug" arch="noarch">
  <version epoch="0" ver="2.3.6" rel="150400.6.9.1"/>
  <changelog author="steven.kowalik@suse.com" date="1584014400">- Update to 1.0.0:
  * Drop support for Python 3.4. (#1478)
  * Remove code that issued deprecation warnings in version 0.15. (#1477)
  * Remove most top-level attributes provided by the werkzeug module in favor of direct imports. For example, instead of import werkzeug; werkzeug.url_quote, do from werkzeug.urls import url_quote. Install version 0.16 first to see deprecation warnings while upgrading. #2, #1640
  * Added utils.invalidate_cached_property() to invalidate cached properties. (#1474)
  * Directive keys for the Set-Cookie response header are not ignored when parsing the Cookie request header. This allows cookies with names such as “expires” and “version”. (#1495)
  * Request cookies are parsed into a MultiDict to capture all values for cookies with the same key. cookies[key] returns the first value rather than the last. Use cookies.getlist(key) to get all values. parse_cookie also defaults to a MultiDict. #1562, #1458
  * Add charset=utf-8 to an HTTP exception response’s CONTENT_TYPE header. (#1526)
  * The interactive debugger handles outer variables in nested scopes such as lambdas and comprehensions. #913, #1037, #1532
  * The user agent for Opera 60 on Mac is correctly reported as “opera” instead of “chrome”. #1556
  * The platform for Crosswalk on Android is correctly reported as “android” instead of “chromeos”. (#1572)
  * Issue a warning when the current server name does not match the configured server name. #760
  * A configured server name with the default port for a scheme will match the current server name without the port if the current scheme matches. #1584
  * InternalServerError has a original_exception attribute that frameworks can use to track the original cause of the error. #1590
  * Headers are tested for equality independent of the header key case, such that X-Foo is the same as x-foo. #1605
  * http.dump_cookie() accepts 'None' as a value for samesite. #1549
  * set_cookie() accepts a samesite argument. #1705
  * Support the Content Security Policy header through the Response.content_security_policy data structure. #1617
  * LanguageAccept will fall back to matching “en” for “en-US” or “en-US” for “en” to better support clients or translations that only match at the primary language tag. #450, #1507
  * MIMEAccept uses MIME parameters for specificity when matching. #458, #1574
  * If the development server is started with an SSLContext configured to verify client certificates, the certificate in PEM format will be available as environ["SSL_CLIENT_CERT"]. #1469
  * is_resource_modified will run for methods other than GET and HEAD, rather than always returning False. #409
  * SharedDataMiddleware returns 404 rather than 500 when trying to access a directory instead of a file with the package loader. The dependency on setuptools and pkg_resources is removed. #1599
  * Add a response.cache_control.immutable flag. Keep in mind that browser support for this Cache-Control header option is still experimental and may not be implemented. #1185
  * Optional request log highlighting with the development server is handled by Click instead of termcolor. #1235
  * Optional ad-hoc TLS support for the development server is handled by cryptography instead of pyOpenSSL. #1555
  * FileStorage.save() supports pathlib and PEP 519 PathLike objects. #1653
  * The debugger security pin is unique in containers managed by Podman. #1661
  * Building a URL when host_matching is enabled takes into account the current host when there are duplicate endpoints with different hosts. #488
  * The 429 TooManyRequests and 503 ServiceUnavailable HTTP exceptions takes a retry_after parameter to set the Retry-After header. #1657
  * Map and Rule have a merge_slashes option to collapse multiple slashes into one, similar to how many HTTP servers behave. This is enabled by default. #1286, #1694
  * Add HTTP 103, 208, 306, 425, 506, 508, and 511 to the list of status codes. #1678
  * Add update, setlist, and setlistdefault methods to the Headers data structure. extend method can take MultiDict and kwargs. #1687, #1697
  * The development server accepts paths that start with two slashes, rather than stripping off the first path segment. #491
  * Add access control (Cross Origin Request Sharing, CORS) header properties to the Request and Response wrappers. #1699
  * Accept values are no longer ordered alphabetically for equal quality tags. Instead the initial order is preserved. #1686
  * Added Map.lock_class attribute for alternative implementations. #1702
  * Support matching and building WebSocket rules in the routing system, for use by async frameworks. #1709
  * Range requests that span an entire file respond with 206 instead of 200, to be more compliant with RFC 7233. This may help serving media to older browsers. #410, #1704
  * The SharedDataMiddleware default fallback_mimetype is application/octet-stream. If a filename looks like a text mimetype, the utf-8 charset is added to it. This matches the behavior of BaseResponse and Flask’s send_file(). #1689
- Remove patch 0001_create_a_thread_to_reap_death_process.patch, not required
- Add pytest-timeout to BuildRequires</changelog>
  <changelog author="arun@gmx.de" date="1586001600">- specfile:
  * be more specific in %files section
  * add sortedcontainers for tests
- update to version 1.0.1:
  * Make the argument to RequestRedirect.get_response
    optional. :issue:`1718`
  * Only allow a single access control allow origin value. :pr:`1723`
  * Fix crash when trying to parse a non-existent Content Security
    Policy header. :pr:`1731`
  * http_date zero fills years &lt; 1000 to always output four
    digits. :issue:`1739`
  * Fix missing local variables in interactive debugger
    console. :issue:`1746`
  * Fix passing file-like objects like io.BytesIO to
    FileStorage.save. :issue:`1733`</changelog>
  <changelog author="mmachova@suse.com" date="1610452800">- Workaround pytest 6.2</changelog>
  <changelog author="michael@stroeder.com" date="1623585600">- skip building for Python 2.x</changelog>
  <changelog author="michael@stroeder.com" date="1624104000">- skip building for Python 2.x
- updated upstream project URL
- Update to 2.0.1
  * Version 2.0.1
  - Fix type annotation for send_file max_age callable. Don’t pass
    pathlib.Path to max_age. #2119
  - Mark top-level names as exported so type checking understands imports
    in user projects. #2122
  - Fix some types that weren’t available in Python 3.6.0. #2123
  - cached_property is generic over its return type, properties decorated
    with it report the correct type. #2113
  - Fix multipart parsing bug when boundary contains special regex
    characters. #2125
  - Type checking understands that calling headers.get with a string
    default will always return a string. #2128
  - If HTTPException.description is not a string, get_description will
    convert it to a string. #2115
  * Version 2.0.0
  - Drop support for Python 2 and 3.5. #1693
  - Deprecate utils.format_string(), use string.Template instead. #1756
  - Deprecate utils.bind_arguments() and utils.validate_arguments(),
    use Signature.bind() and inspect.signature() instead. #1757
  - Deprecate utils.HTMLBuilder. #1761
  - Deprecate utils.escape() and utils.unescape(), use MarkupSafe instead. #1758
  - Deprecate the undocumented python -m werkzeug.serving CLI. #1834
  - Deprecate the environ["werkzeug.server.shutdown"] function that is
    available when running the development server. #1752
  - Deprecate the useragents module and the built-in user agent parser. Use
    a dedicated parser library instead by subclassing user_agent.UserAgent
    and setting Request.user_agent_class. #2078
  - Remove the unused, internal posixemulation module. #1759
  - All datetime values are timezone-aware with tzinfo=timezone.utc. This
    applies to anything using http.parse_date: Request.date,
    .if_modified_since, .if_unmodified_since; Response.date, .expires,
    .last_modified, .retry_after; parse_if_range_header, and IfRange.date.
    When comparing values, the other values must also be aware, or these
    values must be made naive. When passing parameters or setting
    attributes, naive values are still assumed to be in UTC. #2040
  - Merge all request and response wrapper mixin code into single Request
    and Response classes. Using the mixin classes is no longer necessary
    and will show a deprecation warning. Checking isinstance or issubclass
    against BaseRequest and BaseResponse will show a deprecation warning
    and check against Request or Response instead. #1963
  - JSON support no longer uses simplejson if it’s installed. To use
    another JSON module, override Request.json_module and
    Response.json_module. #1766
  - Response.get_json() no longer caches the result, and the cache
    parameter is removed. #1698
  - Response.freeze() generates an ETag header if one is not set. The
    no_etag parameter (which usually wasn’t visible anyway) is no longer
    used. #1963
  - Add a url_scheme argument to build() to override the bound scheme. #1721
  - Passing an empty list as a query string parameter to build() won’t
    append an unnecessary ?. Also drop any number of None items in a list.
    [#1992]
  - When passing a Headers object to a test client method or
    EnvironBuilder, multiple values for a key are joined into one comma
    separated value. This matches the HTTP spec on multi-value headers.
    [#1655]
  - Setting Response.status and status_code uses identical parsing and
    error checking. #1658, #1728
  - MethodNotAllowed and RequestedRangeNotSatisfiable take a response
    kwarg, consistent with other HTTP errors. #1748
  - The response generated by Unauthorized produces one WWW-Authenticate
    header per value in www_authenticate, rather than joining them into a
    single value, to improve interoperability with browsers and other
    clients. #1755
  - If parse_authorization_header can’t decode the header value, it returns
    None instead of raising a UnicodeDecodeError. #1816
  - The debugger no longer uses jQuery. #1807
  - The test client includes the query string in REQUEST_URI and RAW_URI. #1781
  - Switch the parameter order of default_stream_factory to match the order
    used when calling it. #1085
  - Add send_file function to generate a response that serves a file.
    Adapted from Flask’s implementation. #265, #1850
  - Add send_from_directory function to safely serve an untrusted path
    within a trusted directory. Adapted from Flask’s implementation. #1880
  - send_file takes download_name, which is passed even if
    as_attachment=False by using Content-Disposition: inline. download_name
    replaces Flask’s attachment_filename. #1869
  - send_file sets conditional=True and max_age=None by default.
    Cache-Control is set to no-cache if max_age is not set, otherwise
    public. This tells browsers to validate conditional requests instead of
    using a timed cache. max_age=None replaces Flask’s cache_timeout=43200.
    [#1882]
  - send_file can be called with etag="string" to set a custom ETag instead
    of generating one. etag replaces Flask’s add_etags. #1868
  - send_file sets the Content-Encoding header if an encoding is returned
    when guessing mimetype from download_name. #3896
  - Update the defaults used by generate_password_hash. Increase PBKDF2
    iterations to 260000 from 150000. Increase salt length to 16 from 8.
    Use secrets module to generate salt. #1935
  - The reloader doesn’t crash if sys.stdin is somehow None. #1915
  - Add arguments to delete_cookie to match set_cookie and the attributes
    modern browsers expect. #1889
  - utils.cookie_date is deprecated, use utils.http_date instead. The value
    for Set-Cookie expires is no longer “-” delimited. #2040
  - Use request.headers instead of request.environ to look up header attributes. #1808
  - The test Client request methods (client.get, etc.) always return an
    instance of TestResponse. In addition to the normal behavior of
    Response, this class provides request with the request that produced
    the response, and history to track intermediate responses when
    follow_redirects is used. #763, #1894
  - The test Client request methods takes an auth parameter to add an
    Authorization header. It can be an Authorization object or a (username,
    password) tuple for Basic auth. #1809
  - Calling response.close() on a response from the test Client will close
    the request input stream. This matches file behavior and can prevent a
    ResourceWarning in some cases. #1785
  - EnvironBuilder.from_environ decodes values encoded for WSGI, to avoid
    double encoding the new values. #1959
  - The default stat reloader will watch Python files under
    non-system/virtualenv sys.path entries, which should contain most user
    code. It will also watch all Python files under directories given in
    extra_files. #1945
  - The reloader ignores __pycache__ directories again. #1945
  - run_simple takes exclude_patterns a list of fnmatch patterns that will
    not be scanned by the reloader. #1333
  - Cookie names are no longer unquoted. This was against RFC 6265 and
    potentially allowed setting __Secure prefixed cookies. #1965
  - Fix some word matches for user agent platform when the word can be a substring. #1923
  - The development server logs ignored SSL errors. #1967
  - Temporary files for form data are opened in rb+ instead of wb+ mode for
    better compatibility with some libraries. #1961
  - Use SHA-1 instead of MD5 for generating ETags and the debugger pin, and
    in some tests. MD5 is not available in some environments, such as FIPS
    140. This may invalidate some caches since the ETag will be different.
    [#1897]
  - Add Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy
    response header properties. #2008
  - run_simple tries to show a valid IP address when binding to all
    addresses, instead of 0.0.0.0 or ::. It also warns about not running
    the development server in production in this case. #1964
  - Colors in the development server log are displayed if Colorama is
    installed on Windows. For all platforms, style support no longer
    requires Click. #1832
  - A range request for an empty file (or other data with length 0) will
    return a 200 response with the empty file instead of a 416 error. #1937
  - New sans-IO base classes for Request and Response have been extracted
    to contain all the behavior that is not WSGI or IO dependent. These are
    not a public API, they are part of an ongoing refactor to let ASGI
    frameworks use Werkzeug. #2005
  - Parsing multipart/form-data has been refactored to use sans-io
    patterns. This should also make parsing forms with large binary file
    uploads significantly faster. #1788, #875
  - LocalProxy matches the current Python data model special methods,
    including all r-ops, in-place ops, and async. __class__ is proxied, so
    the proxy will look like the object in more cases, including
    isinstance. Use issubclass(type(obj), LocalProxy) to check if an object
    is actually a proxy. #1754
  - Local uses ContextVar on Python 3.7+ instead of threading.local. #1778
  - request.values does not include form for GET requests (even though GET
    bodies are undefined). This prevents bad caching proxies from caching
    form data instead of query strings. #2037
  - The development server adds the underlying socket to environ as
    werkzeug.socket. This is non-standard and specific to the dev server,
    other servers may expose this under their own key. It is useful for
    handling a WebSocket upgrade request. #2052
  - URL matching assumes websocket=True mode for WebSocket upgrade requests. #2052
  - Updated UserAgentParser to handle more cases. #1971
  - werzeug.DechunkedInput.readinto will not read beyond the size of the buffer. #2021
  - Fix connection reset when exceeding max content size. #2051
  - pbkdf2_hex, pbkdf2_bin, and safe_str_cmp are deprecated. hashlib and
    hmac provide equivalents. #2083
  - invalidate_cached_property is deprecated. Use del obj.name instead. #2084
  - Href is deprecated. Use werkzeug.routing instead. #2085
  - Request.disable_data_descriptor is deprecated. Create the request with
    shallow=True instead. #2085
  - HTTPException.wrap is deprecated. Create a subclass manually instead. #2085</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.0.2:
  * Handle multiple tokens in ``Connection`` header when routing
    WebSocket requests.
  * Set the debugger pin cookie secure flag when on https.
  * Fix type annotation for ``MultiDict.update`` to accept iterable
    values :pr:`2142`
  * Prevent double encoding of redirect URL when ``merge_slash=True``
    for ``Rule.match``.
  * ``CombinedMultiDict.to_dict`` with ``flat=False`` considers all
    component dicts when building value lists. :issue:`2189`
  * ``send_file`` only sets a detected ``Content-Encoding`` if
    ``as_attachment`` is disabled to avoid browsers saving
    decompressed ``.tar.gz`` files.
  * Fix type annotations for ``TypeConversionDict.get`` to not return an
    ``Optional`` value if both ``default`` and ``type`` are not
    ``None``.
  * Fix type annotation for routing rule factories to accept
    ``Iterable[RuleFactory]`` instead of ``Iterable[Rule]`` for the
    ``rules`` parameter. :issue:`2183`
  * Add missing type annotation for ``FileStorage.__getattr__``
  * The debugger pin cookie is set with ``SameSite`` set to ``Strict``
    instead of ``None`` to be compatible with modern browser security.
  * Type annotations use ``IO[bytes]`` and ``IO[str]`` instead of
    ``BinaryIO`` and ``TextIO`` for wider type compatibility.
  * Ad-hoc TLS certs are generated with SAN matching CN. :issue:`2158`
  * Fix memory usage for locals when using Python 3.6 or pre 0.4.17
    greenlet versions. :pr:`2212`
  * Fix type annotation in ``CallbackDict``, because it is not
    utilizing a bound TypeVar. :issue:`2235`
  * Fix setting CSP header options on the response. :pr:`2237`
  * Fix an issue with with the interactive debugger where lines would
    not expand on click for very long tracebacks. :pr:`2239`
  * The interactive debugger handles displaying an exception that does
    not have a traceback, such as from ``ProcessPoolExecutor``.</changelog>
  <changelog author="dmueller@suse.com" date="1644926400">- update to 2.0.3:
  * ``ProxyFix`` supports IPv6 addresses.
  * Type annotation for ``Response.make_conditional``,
    ``HTTPException.get_response``, and ``Map.bind_to_environ`` accepts
    ``Request`` in addition to ``WSGIEnvironment`` for the first
    parameter.
  * Fix type annotation for ``Request.user_agent_class``.
  * Accessing ``LocalProxy.__class__`` and ``__doc__`` on an unbound
    proxy returns the fallback value instead of a method object.
  * Redirects with the test client set ``RAW_URI`` and ``REQUEST_URI``
    correctly.</changelog>
  <changelog author="mcepl@suse.com" date="1650369600">- Update to 2.1.1:
  - ResponseCacheControl.s_maxage converts its value to an int,
    like max_age.
  - Drop support for Python 3.6.
  - Using gevent or eventlet requires greenlet&gt;=1.0 or
    PyPy&gt;=7.3.7. werkzeug.locals and contextvars will not work
    correctly with older versions.
  - Remove previously deprecated code.
  - Remove the non-standard shutdown function from the WSGI
    environ when running the development server. See the docs
    for alternatives.
  - Request and response mixins have all been merged into the
    Request and Response classes.
  - The user agent parser and the useragents module is
    removed. The user_agent module provides an interface that
    can be subclassed to add a parser, such as ua-parser. By
    default it only stores the whole string.
  - The test client returns TestResponse instances and can no
    longer be treated as a tuple. All data is available as
    properties on the response.
  - Remove locals.get_ident and related thread-local code from
    locals, it no longer makes sense when moving to
    a contextvars-based implementation.
  - Remove the python -m werkzeug.serving CLI.
  - The has_key method on some mapping datastructures; use key
    in data instead.
  - Request.disable_data_descriptor is removed, pass
    shallow=True instead.
  - Remove the no_etag parameter from Response.freeze().
  - Remove the HTTPException.wrap class method.
  - Remove the cookie_date function. Use http_date instead.
  - Remove the pbkdf2_hex, pbkdf2_bin, and safe_str_cmp
    functions. Use equivalents in hashlib and hmac modules
    instead.
  - Remove the Href class.
  - Remove the HTMLBuilder class.
  - Remove the invalidate_cached_property function. Use del
    obj.attr instead.
  - Remove bind_arguments and validate_arguments. Use
    Signature.bind() and inspect.signature() instead.
  - Remove detect_utf_encoding, it’s built-in to json.loads.
  - Remove format_string, use string.Template instead.
  - Remove escape and unescape. Use MarkupSafe instead.
  - The multiple parameter of parse_options_header is
    deprecated.
  - Rely on PEP 538 and PEP 540 to handle decoding file names
    with the correct filesystem encoding. The filesystem module
    is removed.
  - Default values passed to Headers are validated the same way
    values added later are.
  - Setting CacheControl int properties, such as max_age, will
    convert the value to an int.
  - Always use socket.fromfd when restarting the dev server.
  - When passing a dict of URL values to Map.build, list values
    do not filter out None or collapse to a single value.
    Passing a MultiDict does collapse single items. This undoes
    a previous change that made it difficult to pass a list, or
    None values in a list, to custom URL converters.
  - run_simple shows instructions for dealing with “address
    already in use” errors, including extra instructions for
    macOS.
  - Extend list of characters considered always safe in URLs
    based on RFC 3986.
  - Optimize the stat reloader to avoid watching unnecessary
    files in more cases. The watchdog reloader is still
    recommended for performance and accuracy.
  - The development server uses Transfer-Encoding: chunked for
    streaming responses when it is configured for HTTP/1.1.
  - The development server uses HTTP/1.1, which enables
    keep-alive connections and chunked streaming responses,
    when threaded or processes is enabled.
  - cached_property works for classes with __slots__ if
    a corresponding _cache_{name} slot is added.
  - Refactor the debugger traceback formatter to use Python’s
    built-in traceback module as much as possible.
  - The TestResponse.text property is a shortcut for
    r.get_data(as_text=True), for convenient testing against
    text instead of bytes.
  - safe_join ensures that the path remains relative if the
    trusted directory is the empty string.
  - Percent-encoded newlines (%0a), which are decoded by WSGI
    servers, are considered when routing instead of terminating
    the match early.
  - The test client doesn’t set duplicate headers for
    CONTENT_LENGTH and CONTENT_TYPE.
  - append_slash_redirect handles PATH_INFO with internal
    slashes.
  - The default status code for append_slash_redirect is 308
    instead of 301. This preserves the request body, and
    matches a previous change to strict_slashes in routing.
  - Fix ValueError: I/O operation on closed file. with the test
    client when following more than one redirect.
  - Response.autocorrect_location_header is disabled by
    default. The Location header URL will remain relative, and
    exclude the scheme and domain, by default.
  - Request.get_json() will raise a 400 BadRequest error if the
    Content-Type header is not application/json. This makes
    a very common source of confusion more visible.
- Add no-network-testing.patch to mark all tests requiring
  network access (so they can be skipped by pytest test runner,
  gh#pallets/werkzeug#2393).</changelog>
  <changelog author="mcepl@suse.com" date="1651147200">- Replace no-network-testing.patch with the upstream solution
  2402-dev_server.patch from gh#pallets/werkzeug#2402.
- Add moved_root.patch to make test test_exclude_patterns with
  different PYTHONPATH.</changelog>
  <changelog author="dmueller@suse.com" date="1652270400">- update to 2.1.2:
  * The development server does not set ``Transfer-Encoding: chunked``
    for 1xx, 204, 304, and HEAD responses. :issue:`2375`
  * Response HTML for exceptions and redirects starts with
    ``&lt;!doctype html&gt;`` and ``&lt;html lang=en&gt;``. :issue:`2390`
  * Fix ability to set some ``cache_control`` attributes to ``False``.
    :issue:`2379`
  * Disable ``keep-alive`` connections in the development server, which
    are not supported sufficiently by Python's ``http.server``.
    :issue:`2397`
- drop 2402-dev_server.patch (upstream)</changelog>
  <changelog author="simmphonie@opensuse.org" date="1659096000">- enable multibuild for test</changelog>
  <changelog author="yarunachalam@suse.com" date="1662724800">- Update to 2.2.2:
  * Fix router to restore the 2.1 strict_slashes == False behaviour whereby leaf-requests match branch rules and vice versa. #2489
  * Fix router to identify invalid rules rather than hang parsing them, and to correctly parse / within converter arguments. #2489
  * Update subpackage imports in werkzeug.routing to use the import as syntax for explicitly re-exporting public attributes. #2493
  * Parsing of some invalid header characters is more robust. #2494
  * When starting the development server, a warning not to use it in a production deployment is always shown. #2480
  * LocalProxy.__wrapped__ is always set to the wrapped object when the proxy is unbound, fixing an issue in doctest that would cause it to fail. #2485
  * Address one ResourceWarning related to the socket used by run_simple. #2421
- Update to Version 2.2.1:
  * Fix router so that /path/ will match a rule /path if strict slashes mode is disabled for the rule. #2467
  * Fix router so that partial part matches are not allowed i.e. /2df does not match /&lt;int&gt;. #2470
  * Fix router static part weighting, so that simpler routes are matched before more complex ones. #2471
  * Restore ValidationError to be importable from werkzeug.routing. #2465
- Update to Version 2.2.0
  * Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. #2461
  * Remove previously deprecated code. #2461
  * Add MarkupSafe as a dependency and use it to escape values when rendering HTML. #2419
  * Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. #2439
  * Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. #2425
  * Add a new faster matching router based on a state machine. #2433
  * Fix branch leaf path masking branch paths when strict-slashes is disabled. #1074
  * Names within options headers are always converted to lowercase. This matches RFC 6266 that the case is not relevant. #2442
  * AnyConverter validates the value passed for it when building URLs. #2388
  * The debugger shows enhanced error locations in tracebacks in Python 3.11. #2407
  * Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. #2408
  * Added Sans-IO get_content_length function. #2415
  * Don’t assume a mimetype for test responses. #2450
  * Type checking FileStorage accepts os.PathLike. #2418</changelog>
  <changelog author="yarunachalam@suse.com" date="1662984000">- test failed due to markupsafe module missing
  Included markupsafe module</changelog>
  <changelog author="code@bnavigator.de" date="1663070400">- Clean some unused python2 python36 code from specfile
- Move MarkupSafe to runtime requirement. Versioned. This is
  checked in multibuild test flavor as build requirement.</changelog>
  <changelog author="dmueller@suse.com" date="1678708800">- update to 2.2.3 (bsc#1208283, CVE-2023-25577):
  * drops 0001-limit-the-maximum-number-of-multipart-form-parts.patch
    in older dists
  * Ensure that URL rules using path converters will redirect
    with strict slashes when the trailing slash is missing.
  * Type signature for ``get_json`` specifies that return type
    is not optional when ``silent=False``.
  * ``parse_content_range_header`` returns ``None`` for a value
    like ``bytes */-1`` where the length is invalid, instead of
    raising an ``AssertionError``.
  * Address remaining ``ResourceWarning`` related to the socket
    used by ``run_simple``.
  * Remove ``prepare_socket``, which now happens when
    creating the server.
  * Update pre-existing headers for ``multipart/form-data``
    requests with the test client.
  * Fix handling of header extended parameters such that they
    are no longer quoted.
  * ``LimitedStream.read`` works correctly when wrapping a
    stream that may not return the requested size in one
    ``read`` call.
  * A cookie header that starts with ``=`` is treated as an
    empty key and discarded, rather than stripping the leading ``==``.
  * Specify a maximum number of multipart parts, default 1000,
    after which a ``RequestEntityTooLarge`` exception is
    raised on parsing.  This mitigates a DoS attack where a
    larger number of form/file parts would result in disproportionate
    resource use.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="alarrosa@suse.com" date="1687176000">- Update to 2.3.6:
  * FileStorage.content_length does not fail if the form data did not provide
    a value.
- Update to 2.3.5:
  * Python 3.12 compatibility.
  * Fix handling of invalid base64 values in Authorization.from_header.
  * The debugger escapes the exception message in the page title.
  * When binding routing.Map, a long IDNA server_name with a port does not
    fail encoding.
  * iri_to_uri shows a deprecation warning instead of an error when passing
    bytes.
  * When parsing numbers in HTTP request headers such as Content-Length, only
    ASCII digits are accepted rather than any format that Python’s int and
    float accept.
- Update to 2.3.4:
  * Authorization.from_header and WWWAuthenticate.from_header detects tokens
    that end with base64 padding (=).
  * Remove usage of warnings.catch_warnings.
  * Remove max_form_parts restriction from standard form data parsing and only
    use if for multipart content.
  * Response will avoid converting the Location header in some cases to
    preserve invalid URL schemes like itms-services.
- Update to 2.3.3:
  * Fix parsing of large multipart bodies. Remove invalid leading newline, and
    restore parsing speed.
  * The cookie Path attribute is set to / by default again, to prevent clients
    from falling back to RFC 6265’s default-path behavior.
- Update to 2.3.2:
  * Parse the cookie Expires attribute correctly in the test client.
  * max_content_length can only be enforced on streaming requests if the
    server sets wsgi.input_terminated.
- Update to 2.3.1:
  * Percent-encode plus (+) when building URLs and in test requests.
  * Cookie values don’t quote characters defined in RFC 6265.
  * Include pyi files for datastructures type annotations.
  * Authorization and WWWAuthenticate objects can be compared for equality.
- Update to 2.3.0:
  * Drop support for Python 3.7.
  * Remove previously deprecated code.
  * Passing bytes where strings are expected is deprecated, as well as the
    charset and errors parameters in many places. Anywhere that was annotated,
    documented, or tested to accept bytes shows a warning. Removing this
    artifact of the transition from Python 2 to 3 removes a significant amount
    of overhead in instance checks and encoding cycles. In general, always
    work with UTF-8, the modern HTML, URL, and HTTP standards all strongly
    recommend this.
  * Deprecate the werkzeug.urls module, except for the uri_to_iri and
    iri_to_uri functions. Use the urllib.parse library instead.
  * Update which characters are considered safe when using percent encoding
    in URLs, based on the WhatWG URL Standard.
  * Update which characters are considered safe when using percent encoding
    for Unicode filenames in downloads.
  * Deprecate the safe_conversion parameter of iri_to_uri. The Location header
    is converted to IRI using the same process as everywhere else.
  * Deprecate werkzeug.wsgi.make_line_iter and make_chunk_iter.
  * Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  * Request.get_json() will raise a 415 Unsupported Media Type error if the
    Content-Type header is not application/json, instead of a generic 400.
  * A URL converter’s part_isolating defaults to False if its regex contains
    a /.
  * A custom converter’s regex can have capturing groups without breaking
    the router.
  * The reloader can pick up arguments to python like -X dev, and does not
    require heuristics to determine how to reload the command. Only available
    on Python &gt;= 3.10.
  * The Watchdog reloader ignores file opened events. Bump the minimum version
    of Watchdog to 2.3.0.
  * When using a Unix socket for the development server, the path can start
    with a dot.
  * Increase default work factor for PBKDF2 to 600,000 iterations.
  * parse_options_header is 2-3 times faster. It conforms to RFC 9110, some
    invalid parts that were previously accepted are now ignored.
  * The is_filename parameter to unquote_header_value is deprecated.
  * Deprecate the extra_chars parameter and passing bytes to
    quote_header_value, the allow_token parameter to dump_header, and the cls
    parameter and passing bytes to parse_dict_header.
  * Improve parse_accept_header implementation. Parse according to RFC 9110.
    Discard items with invalid q values.
  * quote_header_value quotes the empty string.
  * dump_options_header skips None values rather than using a bare key.
  * dump_header and dump_options_header will not quote a value if the key ends
    with an asterisk *.
  * parse_dict_header will decode values with charsets.
  * Refactor the Authorization and WWWAuthenticate header data structures.
    + Both classes have type, parameters, and token attributes. The token
    attribute supports auth schemes that use a single opaque token rather
    than key=value parameters, such as Bearer.
    + Neither class is a dict anymore, although they still implement getting,
    setting, and deleting auth[key] and auth.key syntax, as well as
    auth.get(key) and key in auth.
    + Both classes have a from_header class method. parse_authorization_header
    and parse_www_authenticate_header are deprecated.
    + The methods WWWAuthenticate.set_basic and set_digest are deprecated.
    Instead, an instance should be created and assigned to
    response.www_authenticate.
    + A list of instances can be assigned to response.www_authenticate to set
    multiple header values. However, accessing the property only returns the
    first instance.
  * Refactor parse_cookie and dump_cookie.
    + parse_cookie is up to 40% faster, dump_cookie is up to 60% faster.
    + Passing bytes to parse_cookie and dump_cookie is deprecated. The
    dump_cookie charset parameter is deprecated.
    + dump_cookie allows domain values that do not include a dot ., and strips
    off a leading dot.
    + dump_cookie does not set path="/" unnecessarily by default.
  * Refactor the test client cookie implementation.
    + The cookie_jar attribute is deprecated. http.cookiejar is no longer used
    for storage.
    + Domain and path matching is used when sending cookies in requests. The
    domain and path parameters default to localhost and /.
    + Added a get_cookie method to inspect cookies.
    + Cookies have decoded_key and decoded_value attributes to match what the
    app sees rather than the encoded values a client would see.
    + The first positional server_name parameter to set_cookie and
    delete_cookie is deprecated. Use the domain parameter instead.
    + Other parameters to delete_cookie besides domain, path, and value are
    deprecated.
  * If request.max_content_length is set, it is checked immediately when
    accessing the stream, and while reading from the stream in general, rather
    than only during form parsing.
  * The development server, which must not be used in production, will exhaust
    the request stream up to 10GB or 1000 reads. This allows clients to see a
    413 error if max_content_length is exceeded, instead of a “connection
    reset” failure.
  * The development server discards header keys that contain underscores _, as
    they are ambiguous with dashes - in WSGI.
  * secure_filename looks for more Windows reserved file names.
  * Update type annotation for best_match to make default parameter clearer.
  * Multipart parser handles empty fields correctly.
  * The Map charset parameter and Request.url_charset property are deprecated.
    Percent encoding in URLs must always represent UTF-8 bytes. Invalid bytes
    are left percent encoded rather than replaced.
  * The Request.charset, Request.encoding_errors, Response.charset, and
    Client.charset attributes are deprecated. Request and response data must
    always use UTF-8.
  * Header values that have charset information only allow ASCII, UTF-8, and
    ISO-8859-1.
  * Update type annotation for ProfilerMiddleware stream parameter.
  * Use postponed evaluation of annotations.
  * The development server escapes ASCII control characters in decoded URLs
    before logging the request to the terminal.
  * The FormDataParser parse_functions attribute and get_parse_func method,
    and the invalid application/x-url-encoded content type, are deprecated.
  * generate_password_hash supports scrypt. Plain hash methods are deprecated,
    only scrypt and pbkdf2 are supported.
- Remove patch which was made obsolete by upstream:
  * moved_root.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1698408000">- Add patch CVE-2023-46136-slow-multipart-parsing.patch:
  * Stop slow multipart parsing with large files. (CVE-2023-46136, bsc#1216581)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34069.patch, restrict debugger trusted hosts.
  (bsc#1223979, CVE-2024-34069, gh#pallets/werkzeug@3386395b24c7)</changelog>
</package>
<package pkgid="16536ff23ceaff388a9a431e5c56d885b2c323468c75846be8189b77a9f3e68f" name="python311-aiohttp" arch="aarch64">
  <version epoch="0" ver="3.9.3" rel="150400.10.18.4"/>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 3.8.3:
  * Increased the upper boundary of the :doc:`multidict:index` dependency
    to allow for the version 6 -- by :user:`hugovk`.
  * Added support for registering :rfc:`OPTIONS &lt;9110#OPTIONS&gt;`
    HTTP method handlers via :py:class:`~aiohttp.web.RouteTableDef`.
  * Started supporting :rfc:`authority-form &lt;9112#authority-form&gt;` and
    :rfc:`absolute-form &lt;9112#absolute-form&gt;` URLs on the server-side.
  * Fixed Python 3.11 incompatibilities by using Cython 0.29.25.
  * Extended the ``sock`` argument typing declaration of the
    :py:func:`~aiohttp.web.run_app` function as optionally
    accepting iterables.
  * Fixed a regression where :py:exc:`~asyncio.CancelledError`
    occurs on client disconnection.
  * Started exporting :py:class:`~aiohttp.web.PrefixedSubAppResource`
    under :py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.
  * Dropped the :class:`object` type possibility from
    the :py:attr:`aiohttp.ClientSession.timeout`
    property return type declaration.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
</package>
<package pkgid="d003d5e6b27ac5d5b8dfd4954828e5d3e6211f415131290f8c26373a0f3bd4bc" name="python311-aiohttp" arch="ppc64le">
  <version epoch="0" ver="3.9.3" rel="150400.10.18.4"/>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 3.8.3:
  * Increased the upper boundary of the :doc:`multidict:index` dependency
    to allow for the version 6 -- by :user:`hugovk`.
  * Added support for registering :rfc:`OPTIONS &lt;9110#OPTIONS&gt;`
    HTTP method handlers via :py:class:`~aiohttp.web.RouteTableDef`.
  * Started supporting :rfc:`authority-form &lt;9112#authority-form&gt;` and
    :rfc:`absolute-form &lt;9112#absolute-form&gt;` URLs on the server-side.
  * Fixed Python 3.11 incompatibilities by using Cython 0.29.25.
  * Extended the ``sock`` argument typing declaration of the
    :py:func:`~aiohttp.web.run_app` function as optionally
    accepting iterables.
  * Fixed a regression where :py:exc:`~asyncio.CancelledError`
    occurs on client disconnection.
  * Started exporting :py:class:`~aiohttp.web.PrefixedSubAppResource`
    under :py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.
  * Dropped the :class:`object` type possibility from
    the :py:attr:`aiohttp.ClientSession.timeout`
    property return type declaration.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
</package>
<package pkgid="fe4345521893929da2a8356ed59d2c436d1b93fe30cd3a71ea826421a1489b85" name="python311-aiohttp" arch="s390x">
  <version epoch="0" ver="3.9.3" rel="150400.10.18.4"/>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 3.8.3:
  * Increased the upper boundary of the :doc:`multidict:index` dependency
    to allow for the version 6 -- by :user:`hugovk`.
  * Added support for registering :rfc:`OPTIONS &lt;9110#OPTIONS&gt;`
    HTTP method handlers via :py:class:`~aiohttp.web.RouteTableDef`.
  * Started supporting :rfc:`authority-form &lt;9112#authority-form&gt;` and
    :rfc:`absolute-form &lt;9112#absolute-form&gt;` URLs on the server-side.
  * Fixed Python 3.11 incompatibilities by using Cython 0.29.25.
  * Extended the ``sock`` argument typing declaration of the
    :py:func:`~aiohttp.web.run_app` function as optionally
    accepting iterables.
  * Fixed a regression where :py:exc:`~asyncio.CancelledError`
    occurs on client disconnection.
  * Started exporting :py:class:`~aiohttp.web.PrefixedSubAppResource`
    under :py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.
  * Dropped the :class:`object` type possibility from
    the :py:attr:`aiohttp.ClientSession.timeout`
    property return type declaration.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
</package>
<package pkgid="cd729700e5499d09540a30950989117c428049c612a2f44e123cbda69752839a" name="python311-aiohttp" arch="x86_64">
  <version epoch="0" ver="3.9.3" rel="150400.10.18.4"/>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 3.8.3:
  * Increased the upper boundary of the :doc:`multidict:index` dependency
    to allow for the version 6 -- by :user:`hugovk`.
  * Added support for registering :rfc:`OPTIONS &lt;9110#OPTIONS&gt;`
    HTTP method handlers via :py:class:`~aiohttp.web.RouteTableDef`.
  * Started supporting :rfc:`authority-form &lt;9112#authority-form&gt;` and
    :rfc:`absolute-form &lt;9112#absolute-form&gt;` URLs on the server-side.
  * Fixed Python 3.11 incompatibilities by using Cython 0.29.25.
  * Extended the ``sock`` argument typing declaration of the
    :py:func:`~aiohttp.web.run_app` function as optionally
    accepting iterables.
  * Fixed a regression where :py:exc:`~asyncio.CancelledError`
    occurs on client disconnection.
  * Started exporting :py:class:`~aiohttp.web.PrefixedSubAppResource`
    under :py:mod:`aiohttp.web` -- by :user:`Dreamsorcerer`.
  * Dropped the :class:`object` type possibility from
    the :py:attr:`aiohttp.ClientSession.timeout`
    property return type declaration.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
</package>
<package pkgid="a21dd48a04808b03b86f5bb65dff5693587cec8bb71a883e808f23259a9a639e" name="python311-aiohttp" arch="aarch64">
  <version epoch="0" ver="3.9.3" rel="150400.10.21.1"/>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715688000">- Add patch to fix XSS on index pages for static file handling
  * CVE-2024-27306.patch (bsc#1223098, CVE-2024-27306)
- Add patch to remove pytest.mark.internal marker to enable CVE-2024-27306 tests
  * remove-pytest.mark.internal.patch</changelog>
</package>
<package pkgid="af32b42ed88f49515a03b77e0ea22a7b59e24b6c87b75f83feca0939755746f9" name="python311-aiohttp" arch="ppc64le">
  <version epoch="0" ver="3.9.3" rel="150400.10.21.1"/>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715688000">- Add patch to fix XSS on index pages for static file handling
  * CVE-2024-27306.patch (bsc#1223098, CVE-2024-27306)
- Add patch to remove pytest.mark.internal marker to enable CVE-2024-27306 tests
  * remove-pytest.mark.internal.patch</changelog>
</package>
<package pkgid="3a7b295a2e8af6228d2b9a56fc629a02901e02ca20e9447b5d51e5d1294b9f62" name="python311-aiohttp" arch="s390x">
  <version epoch="0" ver="3.9.3" rel="150400.10.21.1"/>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715688000">- Add patch to fix XSS on index pages for static file handling
  * CVE-2024-27306.patch (bsc#1223098, CVE-2024-27306)
- Add patch to remove pytest.mark.internal marker to enable CVE-2024-27306 tests
  * remove-pytest.mark.internal.patch</changelog>
</package>
<package pkgid="aafcad9e190e237a6811fb23cf366c319d170f9907ea676cdd4dc266238747d0" name="python311-aiohttp" arch="x86_64">
  <version epoch="0" ver="3.9.3" rel="150400.10.21.1"/>
  <changelog author="dmueller@suse.com" date="1664884800">- skip more tests</changelog>
  <changelog author="code@bnavigator.de" date="1667822400">- Drop ignore-pytest-deprecationwarning.patch
- Add aiohttp-pr7057-bump-charset-normalizer.patch
  * gh#aio-libs/aiohttp#7057
  * Sync requirement with rpm specs</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846400">- Add py3109-compat.patch to make tests compatible with python 3.10.9. These
  tests are not present anymore in upstream master version so this patch could
  be removed in future releases.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1670846401">- Update py3109-compat.patch to work with python &lt;= 3.10.8 too.</changelog>
  <changelog author="code@bnavigator.de" date="1672056000">- Don't assume python3 to be present for d:l:p:backports/15.4_py39
- Requires pytest 6.2.0 when pytest.TempPathFactory was introduced.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1678968000">- Disable DeprecationWarning to avoid error with the latest setuptools
  and pkg_resources deprecation</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Add Update-update_query-calls-to-work-with-latest-yarl.patch to fix
  problems with latest python-yarl
- Delete aiohttp-pr7057-bump-charset-normalizer.patch not needed
  anymore
- Update to 3.8.4:
  * Fixed incorrectly overwriting cookies with the same name and
    domain, but different path. (#6638)
  * Fixed ConnectionResetError not being raised after client
    disconnection in SSL environments. (#7180)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1692360000">- Remove py3109-compat.patch, no longer required. The current spec
  builds successfully on Python 3.9, 3.10 and 3.11.
- Update to 3.8.5:
  * Upgraded the vendored copy of llhttp to v8.1.1.
    More information here:
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w
  * Added information to C parser exceptions to show which character
    caused the error.
  * Fixed a transport is None error.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli</changelog>
  <changelog author="mcepl@cepl.eu" date="1697284800">- Add remove-re-assert.patch, we really don’t need beautifuly
  presented exceptions for our testing; remove re-assert BR.</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 3.8.6 (bsc#1217181, CVE-2023-47627):
  * Security bugfixes
  * Upgraded the vendored copy of llhttp_ to v9.1.3
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    pjjw-qhg8-p2p9.
  * Updated Python parser to comply with RFCs 9110/9112
  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
    gfw2-4jvh-wgfg.
  * Added ``fallback_charset_resolver`` parameter in
    ``ClientSession`` to allow a user-supplied
    character set detection function.
    Character set detection will no longer be included in 3.9 as
    a default. If this feature is needed,
    please use `fallback_charset_resolver
  * Enabled lenient response parsing for more flexible parsing in
    the client
  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
    to permissions.
  * Fixed output of parsing errors
  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
  * Fixed sorting in ``filter_cookies`` to use cookie with
    longest path.
  * Fixed display of ``BadStatusLine`` messages from llhttp_.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 3.9.0: (bsc#1217684, CVE-2023-49081, bsc#1217682, CVE-2023-49082)
  * Introduced ``AppKey`` for static typing support of
    ``Application`` storage.
  * Added a graceful shutdown period which allows pending tasks
    to complete before the application's cleanup is called.
  * Added `handler_cancellation`_ parameter to cancel web handler on
    client disconnection.
  * This (optionally) reintroduces a feature removed in a
    previous release.
  * Recommended for those looking for an extra level of
    protection against denial-of-service attacks.
  * Added support for setting response header parameters
    ``max_line_size`` and ``max_field_size``.
  * Added ``auto_decompress`` parameter to
    ``ClientSession.request`` to override
    ``ClientSession._auto_decompress``.
  * Changed ``raise_for_status`` to allow a coroutine.
  * Added client brotli compression support (optional with
    runtime check).
  * Added ``client_max_size`` to ``BaseRequest.clone()`` to allow
    overriding the request body size. -- :user:`anesabml`.
  * Added a middleware type alias
    ``aiohttp.typedefs.Middleware``.
  * Exported ``HTTPMove`` which can be used to catch any
    redirection request that has a location -- :user:`dreamsorcerer`.
  * Changed the ``path`` parameter in ``web.run_app()`` to accept
    a ``pathlib.Path`` object.
  * Performance: Skipped filtering ``CookieJar`` when the jar is
    empty or all cookies have expired.
  * Performance: Only check origin if insecure scheme and there
    are origins to treat as secure, in
    ``CookieJar.filter_cookies()``.
  * Performance: Used timestamp instead of ``datetime`` to
    achieve faster cookie expiration in ``CookieJar``.
  * Added support for passing a custom server name parameter to
    HTTPS connection.
  * Added support for using Basic Auth credentials from
    :file:`.netrc` file when making HTTP requests with the
  * :py:class:`~aiohttp.ClientSession` ``trust_env`` argument is
    set to ``True``. -- by :user:`yuvipanda`.
  * Turned access log into no-op when the logger is disabled.
  * Added typing information to ``RawResponseMessage``. -- by
    :user:`Gobot1234`
  * Removed ``async-timeout`` for Python 3.11+ (replaced with
    ``asyncio.timeout()`` on newer releases).
  * Added support for ``brotlicffi`` as an alternative to
    ``brotli`` (fixing Brotli support on PyPy).
  * Added ``WebSocketResponse.get_extra_info()`` to access a
    protocol transport's extra info.
  * Allow ``link`` argument to be set to None/empty in HTTP 451
    exception.
  * Fixed client timeout not working when incoming data is always
    available without waiting. -- by :user:`Dreamsorcerer`.
  * Fixed ``readuntil`` to work with a delimiter of more than one
    character.
  * Added ``__repr__`` to ``EmptyStreamReader`` to avoid
    ``AttributeError``.
  * Fixed bug when using ``TCPConnector`` with
    ``ttl_dns_cache=0``.
  * Fixed response returned from expect handler being thrown
    away. -- by :user:`Dreamsorcerer`
  * Avoided raising ``UnicodeDecodeError`` in multipart and in
    HTTP headers parsing.
  * Changed ``sock_read`` timeout to start after writing has
    finished, avoiding read timeouts caused by an unfinished
    write. -- by :user:`dtrifiro`
  * Fixed missing query in tracing method URLs when using
    ``yarl`` 1.9+.
  * Changed max 32-bit timestamp to an aware datetime object, for
    consistency with the non-32-bit one, and to avoid a
    ``DeprecationWarning`` on Python 3.12.
  * Fixed ``EmptyStreamReader.iter_chunks()`` never ending.
  * Fixed a rare ``RuntimeError: await wasn't used with future``
    exception.
  * Fixed issue with insufficient HTTP method and version
    validation.
  * Added check to validate that absolute URIs have schemes.
  * Fixed unhandled exception when Python HTTP parser encounters
    unpaired Unicode surrogates.
  * Updated parser to disallow invalid characters in header field
    names and stop accepting LF as a request line separator.
  * Fixed Python HTTP parser not treating 204/304/1xx as an empty
    body.
  * Ensure empty body response for 1xx/204/304 per RFC 9112 sec
    6.3.
  * Fixed an issue when a client request is closed before
    completing a chunked payload. -- by :user:`Dreamsorcerer`
  * Edge Case Handling for ResponseParser for missing reason
    value.
  * Fixed ``ClientWebSocketResponse.close_code`` being
    erroneously set to ``None`` when there are concurrent async
    tasks receiving data and closing the connection.
  * Added HTTP method validation.
  * Fixed arbitrary sequence types being allowed to inject values
    via version parameter. -- by :user:`Dreamsorcerer`
  * Performance: Fixed increase in latency with small messages
    from websocket compression changes.
  * Improved Documentation
  * Fixed the `ClientResponse.release`'s type in the doc. Changed
    from `comethod` to `method`.
  * Added information on behavior of base_url parameter in
    `ClientSession`.
  * Completed ``trust_env`` parameter description to honor
    ``wss_proxy``, ``ws_proxy`` or ``no_proxy`` env.
  * Dropped Python 3.6 support.
  * Dropped Python 3.7 support. -- by :user:`Dreamsorcerer`
  * Removed support for abandoned ``tokio`` event loop.
  * Made ``print`` argument in ``run_app()`` optional.
  * Improved performance of ``ceil_timeout`` in some cases.
  * Changed importing Gunicorn to happen on-demand, decreasing
    import time by ~53%. -- :user:`Dreamsorcerer`
  * Improved import time by replacing ``http.server`` with
    ``http.HTTPStatus``.
  * Fixed annotation of ``ssl`` parameter to disallow ``True``.
- drop Update-update_query-calls-to-work-with-latest-yarl.patch
  (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.9.1:
  * Fixed importing aiohttp under PyPy on Windows.
  * Fixed async concurrency safety in websocket compressor.
  * Fixed ``ClientResponse.close()`` releasing the connection
    instead of closing.
  * Fixed a regression where connection may get closed during
    upgrade. -- by :user:`Dreamsorcerer`
  * Fixed messages being reported as upgraded without an Upgrade
    header in Python parser. -- by :user:`Dreamsorcerer`</changelog>
  <changelog author="code@bnavigator.de" date="1703246400">- Fix pytest call
- Update requirements</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706270400">- Disable broken tests with openssl 3.2 and python &lt; 3.11 bsc#1217782</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1706616000">- Update to version 3.9.3
  * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter
    when set outside of ``ClientSession`` (e.g. directly in ``TCPConnector``)
  * Improved test suite handling of paths and temp files to consistently
    use pathlib and pytest fixtures.
- from version 3.9.2 (bsc#1219341, CVE-2024-23334, bsc#1219342, CVE-2024-23829)
  * Fixed server-side websocket connection leak.
  * Fixed ``web.FileResponse`` doing blocking I/O in the event loop.
  * Fixed double compress when compression enabled and compressed file
    exists in server file responses.
  * Added runtime type check for ``ClientSession`` ``timeout`` parameter.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Improved validation of paths for static resources requests to the server.
  * Added support for passing :py:data:`True` to ``ssl`` parameter in
    ``ClientSession`` while deprecating :py:data:`None`.
  * Fixed an unhandled exception in the Python HTTP parser on header lines
    starting with a colon.
  * Fixed examples of ``fallback_charset_resolver`` function in the
    :doc:`client_advanced` document.
  * The Sphinx setup was updated to avoid showing the empty
    changelog draft section in the tagged release documentation
    builds on Read The Docs.
  * The changelog categorization was made clearer. The contributors can
    now mark their fragment files more accurately.
  * Updated :ref:`contributing/Tests coverage &lt;aiohttp-contributing&gt;`
    section to show how we use ``codecov``.
  * Replaced all ``tmpdir`` fixtures with ``tmp_path`` in test suite.
- Refresh patches for new version
  * remove-re-assert.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715688000">- Add patch to fix XSS on index pages for static file handling
  * CVE-2024-27306.patch (bsc#1223098, CVE-2024-27306)
- Add patch to remove pytest.mark.internal marker to enable CVE-2024-27306 tests
  * remove-pytest.mark.internal.patch</changelog>
</package>
<package pkgid="7fbbc854747a8c941edbfeb1a467629978178b4bc2a87c78fc636e0dff83d098" name="python311-aiosignal" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="150400.9.7.2"/>
  <changelog author="code@bnavigator.de" date="1639224000">- initial specfile for version 1.2.0
- required by aiohttp 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1640001600">- Add missing test dependency pytest-asyncio</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Update to 1.3.1:
  * Removed stray quote and comma from setup.cfg preventing PyPI from
    accepting a release. (#361)
- 1.3.0:
  * Switched to declarative package setup. #267
  * Added support for Python 3.11. #360
  * Dropped Python 3.6 support. #267</changelog>
</package>
<package pkgid="0367dbb46036959e6eba87b39282bf93fae82ee62f51bf27a2dfb40c03546e59" name="python311-argcomplete" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="150400.12.12.2"/>
  <changelog author="pgajdos@suse.com" date="1590580800">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 1.12.2:
  - Update importlib-metadata dependency pin (#332)
  - Add change log project URL (#312)
  - Replace Travis CI with GitHub Actions (#323)
  - Update importlib-metadata dependency version range
  - Bash nounset mode fixes (#313)
- remove 0001-Remove-expected-test-failure-for-new-versions-of-fish.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 1.12.3:
  * Update importlib-metadata version pin
  * Display script debug output in tcsh
  * Fish support improvements
  * Print ``warn()`` message from beginning of line
  * Test infrastructure improvements</changelog>
  <changelog author="dmueller@suse.com" date="1657108800">- update to 2.0.0:
  * Truncate input after cursor.
  * Support of path completion in fish
  * Drop support for Python 2.7 and 3.5
  * Add support for Python 3.10
  * Test, documentation, and release infrastructure improvements</changelog>
  <changelog author="dmueller@suse.com" date="1675166400">- fix substitution on tests/test.py to test the current python flavor</changelog>
  <changelog author="mcepl@suse.com" date="1678968000">- Add without_fish.patch which makes fish only optional
  BuildRequires (gh#kislyuk/argcomplete!410).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1679659200">- Remove importlib-metadata requirement, it's not needed for python &gt; 3.7</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add without_zsh.patch
- Delete skip_tcsh_tests.patch
- Delete without_fish.patch
- Update to 3.0.8:
  * Test suite shell wrapper: Accept OSError on exit
- 3.0.7:
  * Test suite: Use general regex to cut zsh reset ANSI sequences (#425)
- 3.0.6:
  * Allow importlib-metadata 6.x; skip test failures on Python 3.7 (#420, #424)
  * Note completers can return iterables of strings, not just lists (#422)
  * Documentation and test improvements
- 3.0.5:
  * Call _default as fallback in zsh global completion hook
  * Begin support for mapping-emitting completers
- 3.0.4:
  * activate-global-python-argcomplete: do not overwrite existing dotfile in user directory
  * Add NOTICE file
  * Establish long term name for split_line as argcomplete.lexers.split_line
- 3.0.3:
  * Re-add split_line to API (#419)
- 3.0.2:
  * Fix zsh default completion issues
- 3.0.1:
  * Fix zsh autoload issues
- 3.0.0:
  * Fully support zsh. Argcomplete now supports completion
    descriptions and global completion in zsh.
  * Clean up top level namespace.
  * Documentation and test improvements.
- 2.1.2:
  * Test infrastructure improvements
  * Indicate that there is no support commitment for fish and tcsh shells
- 2.1.1:
  * Documentation and test improvements
- 2.1.0:
  * Remove scripts for contrib-supported shells from global namespace
- 2.0.6:
  * setup.py: exclude test.* subpackages from find_packages (#406)
  * Support PowerShell (#405)
  * CI updates
- 2.0.5:
  * Revert "Support powershell (#392)"</changelog>
  <changelog author="schwab@suse.de" date="1685448000">- bash-repl.patch: Use correct place for auxiliary bashrc.sh file from pexpect</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 3.1.1
  * Search through asdf shims
  * Use \` as escape character in PowerShell (#434)
- from version 3.1.0
  * setup.py -&gt; pyproject.toml migration start (#427)
  * Improve user install logic in activate-global-python-argcomplete (#437)
  * Ensure Python 3.7 compatibility in check_console_script (#436)
  * ZSH implementation fixes (#431, #433)
  * Documentation improvements
- Drop obsolete patch
  * trim-test-deps.patch</changelog>
  <changelog author="dmueller@suse.com" date="1696507200">- update to 3.1.2:
  * Ensure Python 3.12+ compatibility in check_console_script</changelog>
  <changelog author="dmueller@suse.com" date="1698148800">- add setuptools_scm for proper version detection</changelog>
  <changelog author="dmueller@suse.com" date="1699617600">- update to 3.1.4:
  * Call \_default as a fallback in zsh global completion
  * zsh: Allow to use external script (#453)
  * Add support for Python 3.12 and drop EOL 3.6 and 3.7 (#449)
  * Use homebrew prefix by default
  * zsh: Allow to use external script (#453)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.1.6:
  * Respect user choice in activate-global-python-argcomplete
  * Escape colon in zsh completions. Fixes #456
  * Call \_default as a fallback in zsh global completion</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- update to 3.2.1:
  * Allow explicit zsh global completion activation (#467)
  * Fix and test global completion in zsh (#463, #466)
  * Add –yes option to activate-global-python-argcomplete (#461)
  * Test suite improvements
- drop without_zsh.patch: obsolete</changelog>
  <changelog author="code@bnavigator.de" date="1704283200">- Remove coverage check
- Fix zsh test failures: avoid coloring terminal</changelog>
  <changelog author="dmueller@suse.com" date="1706616000">- update to 3.2.2:
  * Expand tilde in zsh</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Update to 3.3.0 (bsc#1222880):
  * Preserve compatibility with argparse option tuples of length 4.
    This update is required to use argcomplete on Python 3.11.9+ or
    3.12.3+.
- update to 3.2.3:
  * Allow register-python-argcomplete output to be used as lazy-loaded
    zsh completion module (#475)
  - Move debug_stream initialization to helper method to allow fd 9
    behavior to be overridden in subclasses (#471)</changelog>
</package>
<package pkgid="a311f6c182ce9a876f45bd60ebe8b4865388555fe9bad2bbcdd1ee1aa56fadd1" name="python311-asgiref" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="150400.9.7.3"/>
  <changelog author="mrueckert@suse.de" date="1587643200">- initial package</changelog>
  <changelog author="tchvatal@suse.com" date="1587729600">- Execute tests</changelog>
  <changelog author="steven.kowalik@suse.com" date="1593604800">- Update to 3.2.10:
  * Fixed bugs due to bad WeakRef handling introduced in 3.2.8
  * Fixed regression with exception handling in 3.2.8 related to the
    contextvars fix.
  * Fixed small memory leak in local.Local
  * contextvars are now persisted through AsyncToSync</changelog>
  <changelog author="steven.kowalik@suse.com" date="1610625600">- Update to 3.3.1
  * Updated StatelessServer to use ASGI v3 single-callable applications.
  * sync_to_async now defaults to thread-sensitive mode being on
  * async_to_sync now works inside of forked processes
  * WsgiToAsgi now correctly clamps its response body when Content-Length
    is set</changelog>
  <changelog author="code@bnavigator.de" date="1620216000">- Update to 3.3.4
  * The async_to_sync type error is now a warning due the
    high false negative rate when trying to detect
    coroutine-returning callables in Python.
- Release to 3.3.3
  * The sync conversion functions now correctly detect
    functools.partial and other wrappers around async
    functions on earlier Python releases.
- Release to 3.3.2
  * SyncToAsync now takes an optional "executor" argument if
    you want to supply your own executor rather than using
    the built-in one.
  * async_to_sync and sync_to_async now check their
    arguments are functions of the correct type.
  * Raising CancelledError inside a SyncToAsync function no
    longer stops a future call from functioning.
  * ThreadSensitive now provides context hooks/override
    options so it can be made to be sensitive in a unit
    smaller than threads (e.g. per request)</changelog>
  <changelog author="mmachova@suse.com" date="1625659200">- Adjust requirements to work also on Leap</changelog>
  <changelog author="simmphonie@opensuse.org" date="1630411200">- Update to 3.4.1
  * Fixed an issue with the deadlock detection where it had false positives
    during exception handling- Release to 3.4.0
- Release to 3.4.0
  * Calling sync_to_async directly from inside itself (which causes a deadlock
    when in the default, thread-sensitive mode) now has deadlock detection.
  * asyncio usage has been updated to use the new versions of get_event_loop,
    ensure_future, wait and gather, avoiding deprecation warnings in Python 3.10.
    Python 3.6 installs continue to use the old versions; this is only for 3.7+
  * sync_to_async and async_to_sync now have improved type hints that pass
    through the underlying function type correctly.
  * All Websocket* types are now spelled WebSocket, to match our specs and the
    official spelling. The old names will work until release 3.5.0, but will
    raise deprecation warnings.
  * The typing for WebSocketScope and HTTPScope's `extensions` key has been
    fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 3.5.2:
  * Fix async-to-async typo
  * Add tests for sync_to_async
  * Improved docs - Starlette supports WebSockets
  * Use get_event_loop in class-level code
  * Changed how StatelessServer handles event loops
  * Fixed pytest_asyncio deprecation warning.
  * Drop python 3.6, add python 3.10
  * Fix allowed values for spec_version
  * Rewrote multiprocessing test to use no local functions
  * Fixed a typographical error
  * Remove SOCK_NONBLOCK from socket creation on tests
  * Preserve CurrentThreadExecutor across create_task
  * Don't warn 'non-async-marked callable' for async callable instance
  * Disallow async callable class instances as callable
  * Fix root_path in WebSocket Connection Scope</changelog>
  <changelog author="dmueller@suse.com" date="1673092800">- update to 3.6.0:
  * Two new functions are added to the ``asgiref.sync`` module:
    ``iscoroutinefunction()`` and ``markcoroutinefunction()``.
  * Python 3.12 deprecates ``asyncio.iscoroutinefunction()`` as an alias for
    ``inspect.iscoroutinefunction()``, whilst also removing the
    ``_is_coroutine`` marker.  The latter is replaced with the
    ``inspect.markcoroutinefunction`` decorator.
  * The new ``asgiref.sync`` functions are compatibility shims for these
    functions that can be used until Python 3.12 is the minimum supported
    version.
  * The ``loop`` argument to ``asgiref.timeout.timeout`` is deprecated. As per
    other ``asyncio`` based APIs, the running event loop is used by default.
    Note that ``asyncio`` provides timeout utilities from Python 3.11, and
    these should be preferred where available.
  * Support for the ``ASGI_THREADS`` environment variable, used by
    ``SyncToAsync``, is removed. In general, a running event-loop is not
    available to `asgiref` at import time, and so the default thread pool
    executor cannot be configured. Protocol servers, or applications, should set
    the default executor as required when configuring the event loop at
    application startup.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="b8894694efe27a844754bee70d28cc23fc5e1679d4eb64b167cc1d16ed4ee47f" name="python311-async_timeout" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="150400.10.7.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1503576000">- initial package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1504872000">- Fix building
- Remove skip_python3 for python &lt; 3.4, the package already
  requires python &gt;= 3.4.</changelog>
  <changelog author="aloisio@gmx.com" date="1505217600">- Update to version 1.4.0
  * Implement `remaining` property (#20)
    + If timeout is not started yet or started unconstrained:
    `remaining` is `None`
    + If timeout is expired: `remaining` is `0.0`
    + All others: roughly amount of time before `TimeoutError` is triggered</changelog>
  <changelog author="aloisio@gmx.com" date="1508673600">- Update to version 2.0.0
  * Changed timeout &lt;= 0 behaviour
    + Backward incompatibility change, prior this version 0 was
    shortcut for None
    + when timeout &lt;= 0 TimeoutError raised faster</changelog>
  <changelog author="tbechtold@suse.com" date="1522065600">- rename package to python-async_timeout to match pypi name
- update to 2.0.1:
  * Fix ``PendingDeprecationWarning`` on Python 3.7 (#33)</changelog>
  <changelog author="adrian@suse.de" date="1529928000">- update to 3.0.0:
  * Drop Python 3.4, the minimal supported version is Python 3.5.3
  * Provide type annotations</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 3.0.1:
  * More aggressive typing (#48)
- Run tests</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Fix Obsolete/Provides to work with multiple python3 flavors</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 4.0.1
  * Fix regression:
  - Don't raise TimeoutError from timeout object that doesn't
    enter into async context manager
  - Use call_soon() for raising TimeoutError if deadline is
    reached on entering into async context manager (#258)
  * Make Timeout class available in __all__.
- Release 4.0.0
  * Implemented timeout_at(deadline) (#117)
  * Supported timeout.deadline and timeout.expired properties.
  * Dropped timeout.remaining property: it can be calculated as
    timeout.deadline - loop.time()
  * Dropped timeout.timeout property that returns a relative
    timeout based on the timeout object creation time; the absolute
    timeout.deadline should be used instead.
  * Added the deadline modification methods: timeout.reject(),
    timeout.shift(delay), timeout.update(deadline).
  * Deprecated synchronous context manager usage</changelog>
  <changelog author="dmueller@suse.com" date="1642248000">- update to 4.0.2:
  * Fix annotations on __exit__ and __aexit__
  * Use stdlib typing.final in Python 3.8+</changelog>
  <changelog author="daniel.garcia@suse.com" date="1679659200">- Remove not needed dependency typing_extensions, just needed for
  python &lt; 3.8</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="75e67f521eea46dd23b4685d9a76a6b0c8f2f561b7ebc8c5cd27d38b12696a65" name="python311-blinker" arch="noarch">
  <version epoch="0" ver="1.6.2" rel="150400.12.7.4"/>
  <changelog author="benoit.monin@gmx.fr" date="1424606400">- update to version 1.3:
  * The global signal stash behind blinker.signal() is now backed
    by a regular name-to-Signal dictionary
  * blinker.Namespace is now built on a regular dict
  * Signal.connect('text-sender') uses an alterate hashing strategy
    to avoid sharp edges in text identity.</changelog>
  <changelog author="freitag@opensuse.org" date="1451822400">- update to version 1.4:
  * Verified Python 3.4 support (no changes needed)
  * Additional bookkeeping cleanup for non-ANY connections at disconnect
    time.
  * Added Signal._cleanup_bookeeping() to prune stale bookkeeping on
    demand</changelog>
  <changelog author="freitag@opensuse.org" date="1451822401">- Fixed doc section in file list</changelog>
  <changelog author="freitag@opensuse.org" date="1457697600">- use setup.py option to record file list for rpm package</changelog>
  <changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1494158400">- convert the package to singlespec
- call fdupes to fix duplicated files
- remove unneeded buildrequires: unzip
- remove unneded doc file that trigger rpmlint
- put the documentation in a separate sub-package</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1544011200">- Trim bias from description.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- use pytest instead of deprecated nose
- added patches
  https://github.com/jek/blinker/pull/60
  + python-blinker-remove-nose.patch</changelog>
  <changelog author="arun@gmx.de" date="1662984000">- specfile:
  * update copyright year
  * remove patch python-blinker-remove-nose.patch; included upstream
  * docs and license changed to .rst
  * build docs using Sphinx
- update to version 1.5:
  * Support Python &gt;= 3.7 and PyPy. Python 2, Python &lt; 3.7, and Jython
    may continue to work, but the next release will make incompatible
    changes.</changelog>
  <changelog author="mcepl@suse.com" date="1663156800">- Fix documentation generation.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- move documentation into the main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683633600">- Update to 1.6.2:
  * Type annotations are not evaluated at runtime. typing-extensions
    is not a runtime dependency. :pr:`94`
- 1.6.1:
  * Ensure that py.typed is present in the distributions (to enable
    other projects to use blinker's typing).
  * Require typing-extensions &gt; 4.2 to ensure it includes ParamSpec.
    :issue:`90`
- 1.6:
  * Add a muted context manager to temporarily turn off a signal.
    :pr:`84`
  * Allow int senders (alongside existing string senders). :pr:`83`
  * Add a send_async method to the Signal to allow signals to send to
    coroutine receivers. :pr:`76`
  * Update and modernise the project structure to match that used by
    the pallets projects. :pr:`77`
  * Add an intial set of type hints for the project.</changelog>
  <changelog author="mcepl@suse.com" date="1690372800">- Add no-stdpy-pyc.patch which makes Sphinx not to generate
  * .pyc files for the Python interpreter it uses for generating
  documentation.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690804800">- Remove no-stdpy-pyc.patch
- Call directly to the sphinx module with the specific python
  interpreter to avoid the usage of default python, bsc#1213698.</changelog>
</package>
<package pkgid="85f3e1807461a9db8d05789b601c9a0517d6246e503362700ef4eba44f11baea" name="python311-chardet" arch="noarch">
  <version epoch="0" ver="5.2.0" rel="150400.13.7.2"/>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1526385600">- Fix update-alternatives call in %postun.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1551182400">- Switch to multibuild to avoid buildcycles</changelog>
  <changelog author="tchvatal@suse.com" date="1562155200">- Add patch to fix build with pytest4:
  * pytest4.patch</changelog>
  <changelog author="mcepl@suse.com" date="1571054400">- Replace %fdupes -s with plain %fdupes; hardlinks are better.</changelog>
  <changelog author="jayvdb@gmail.com" date="1608465600">- Remove now unnecessary pytest4.patch and python-chardet-rpmlintrc
- Update to v4.0.0
  See https://github.com/chardet/chardet/compare/3.0.4...4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1633003200">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="pgajdos@suse.com" date="1639137600">- pytest-runner is not required for build</changelog>
  <changelog author="code@bnavigator.de" date="1657022400">- Update to  5.0.0
  * This release is the first release of chardet that no longer
    supports Python &lt; 3.6
  * Added a prober for Johab Korean (#207, @grizlupo)
  * Added a prober for UTF-16/32 BE/LE (#109, #206, @jpz)
  * Added test data for Croatian, Czech, Hungarian, Polish, Slovak,
    Slovene, Greek, and Turkish, which should help prevent future
    errors with those languages
  * Improved XML tag filtering, which should improve accuracy for
    XML files (#208)
  * Tweaked SingleByteCharSetProber confidence to match latest
    uchardet (#209)
  * Made detect_all return child prober confidences (#210)
  * Updated examples in docs (#223, @domdfcoding)
  * Documentation fixes (#212, #224, #225, #226, #220, #221, #244
    from too many to mention)
  * Minor performance improvements (#252, @deedy5)
  * Add support for Python 3.10 when testing (#232, @jdufresne)
  * Lots of little development cycle improvements, mostly thanks to
    @jdufresne
- Canonicalize alternatives creation</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 5.1.0:
  * Add should_rename_legacy argument to most functions, which will rename
    older encodings to their more modern equivalents (e.g., GB2312 becomes
    GB18030) (#264, @dan-blanchard)
  * Add capital letter sharp S and ISO-8859-15 support
  * Add a prober for MacRoman encoding
  * Add --minimal flag to chardetect command
  * Add type annotations to the project and run mypy on CI
  * Add support for Python 3.11
  * Clarify LGPL version in License trove classifier (#255, @musicinmybrain)
  * Remove support for EOL Python 3.6 (#260, @jdufresne)
  * Remove unnecessary guards for non-falsey values (#259, @jdufresne)
  * Switch to Python 3.10 release in GitHub actions (#257, @jdufresne)
  * Remove setup.py in favor of build package (#262, @jdufresne)
  * Run tests on macos, Windows, and 3.11-dev (#267, @dan-blanchard)</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- skip python 3.6 builds</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1693828800">- update to 5.2.0:
  * Adds support for running chardet CLI via `python -m chardet`</changelog>
</package>
<package pkgid="9ce1581fbb623cfb098de2e0cf67387105ce5fefacf5dbf76f54cca62ada0703" name="python311-constantly" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="150400.12.7.2"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- initial packaging (version 15.0.1)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="8d9a84e03418d8af2b4cc6c3b1b9434a8532c0d32f01e26156608a5e102f85a3" name="python311-decorator" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="150400.12.7.4"/>
  <changelog author="benoit.monin@gmx.fr" date="1430568000">- update to version 3.4.2:
  * Same as 3.4.1, re-uploaded to PyPI
- additional changes from version 3.4.1:
  * Ported the repository from GoogleCode to GitHub and added
    Travis CI support
  * Tests are executed with the new command `python test.py -v`
  * setuptools is now mandatory in Python 3
  * The suggested installation tool is `pip`, not `easy_install`
  * Supported IronPython and other Python implementations without
    sys._getframe, as requested by Doug Blank
- remove python-nose from BuildRequires, unneeded
- replace README.txt with README.rst: changed upstream</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491048000">- Update to 4.0.11
  * Small improvements to the documentation and tested with Python 3.6
- Update to 4.0.10
  * Improved the documentation thanks to Tony Goodchild (zearin) who also
    provided a much better CSS than the one I was using.
- Update to 4.0.9
  * Same as 4.0.7 and 4.0.8, re-uploaded due to issues on PyPI.
- Update to 4.0.7
  * Switched to a new changelog format (the one in http://keepachangelog.com/)
    since it was contributed by Alexander Artemenko. Re-added a newline to support
    old version of Python, as requested by [azjps](https://github.com/azjps).
- Update to 4.0.6
  * Removed a file x.py accidentally entered in the tarball.
- Update to 4.0.5
  * Documented a quirk signaled by David Goldstein when writing decorators
    for functions with keyword arguments. Avoided copying the globals,
    as signaled by Benjamin Peterson.
- Update to 4.0.4
  * Included a patch from Zev Benjamin: now decorated functions play well
    with cProfile.
- Update to 4.0.3
  * Added a warning about the memoize example, as requested by Robert
    Buchholz.
- Update to 4.0.2
  * docs/README.rst was not included in MANIFEST.in by accident,
    thus breaking the source installation.
- Update to 4.0.1
  * Added docs directory and upload_docs command. Fixed bug with
    `__qualname__`, reported by Lucian Petrut.
- Update to 4.0.0
  * Removed the need for 2to3 by dropping the support for Python 2.5.
  * Added a MANIFEST.in file and produced a proper wheel. Improved
    the integration with setuptools so that `python setup.py test` works.
  * Reworked the documentation and introduced `decorator.decorated`.
  * Removed any dependence from `inspect.getargspec`, which is deprecated
    in Python 3.5, as signaled by Ralf Gommers.
  * Fixed `contextmanager` to work with Python 3.5.
  * Copied the `__qualname__` attribute, as requested by Frazer McLean.
  * Added a `dispatch_on` facility to implement generic functions.
- Implement single-spec version.</changelog>
  <changelog author="jmatejek@suse.com" date="1491393600">- fix source url</changelog>
  <changelog author="tbechtold@suse.com" date="1502280000">- update to 4.1.2:
  * Made it possible to define decorators converting coroutines into regular
    functions.
  * Changed the documentation build system to sphinx and uploaded the docs
    on readthedocs.org.
  * Support for Python 3.5 coroutines defined with `async def`, thanks to
    Victor-Nicolae Savu who raised the issue of `iscoroutinefunction` not
    giving the right answer for coroutines decorated with the decorator module.</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  - updated copyright year
- updated to version 4.2.1:
  * Fixed a regression breaking IPython reported by
    https://github.com/spapini .
- changes from version 4.2.0 :
  * Added a facility to define families of decorators (aka decorators
    with arguments) as requested by several users. Accepted a pylint
    patch by David Allouche.</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.3.0:
  * Extended the decorator family facility to work with positional
    arguments and updated the documentation. Removed
    decorator.getargspec and provided decorator.getfullargspec
    instead. This is convenient for users of Python 2.6/2.7, the
    others can just use inspect.getfullargspec.</changelog>
  <changelog author="jengelh@inai.de" date="1523966401">- Ensure neutrality of description.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1550059200">- update to version 4.3.2
  * now the decorator module can decorate generator functions by
    preserving their being generator functions
  * Set `python_requires='&gt;=2.6, !=3.0.*, !=3.1.*'` in setup.py
- update to version 4.3.1
  * Added a section "For the impatient" to the README, addressing
    an issue raised by Amir Malekpour.
  * Added support for Python 3.7.
  * Now  the path to the decorator module appears in the
    tracebacks, as suggested by a user at EuroPython 2018.</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Update to 4.4.0:
  * Fixed a regression with decorator factories breaking the case with no
    arguments by going back to the syntax used in version 4.2.</changelog>
  <changelog author="dmueller@suse.com" date="1576843200">- update to 4.4.1:
  Changed the description to "Decorators for Humans" are requested by
  several users. Fixed a .rst bug in the description as seen in PyPI.</changelog>
  <changelog author="dmueller@suse.com" date="1584187200">- update to 4.4.2:
  * removing the usage of `__file__`, that was breaking PyOxidizer.
  * fixes for the future Python 3.9.
  * some fixes for the future Python 3.10.</changelog>
  <changelog author="dmueller@suse.com" date="1627387200">- update to 5.0.9:
  * Fixed a test breaking PyPy. Restored support for Sphinx.
  * Made the decorator module more robust when decorating builtin functions
    lacking dunder attributes, like `dict.__setitem__`.
  * The decorator module was not passing correctly the defaults inside the
    `*args` tuple, thanks to Dan Shult for the fix.
  * The decorator module was not copying the __module__ attribute anymore.
  * Dropped support for Python &lt; 3.5 with a substantial simplification of
    the code base (now building a decorator does not require calling "exec").
    Added a way to mimic functools.wraps-generated decorators.</changelog>
  <changelog author="mmachova@suse.com" date="1628164800">- Add upstream patch kwsyntax.patch</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 5.1.0:
  * Added a function `decoratorx` using the `FunctionMaker` and thus
    preserving the signature of `__code__` objects.
  * Sphinx was printing a few warnings when building the documentation
  * functions decorated with `decorator.contextmanager` were one-shot,
    as discovered by Alex Pizarro.
  * `decorator.decorator` was not passing the kwsyntax argument.
- drop kwsyntax.patch (usptream)</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.1.1:
  * cythonized functions can now be decorated.
  * fixed an issue in the `decorator_apply` example and
  * regression fix for the "fix" in version 5.1 broke
  ` decorator.contextmanager` even more. Both issues are now solved.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="f01ee819648876d10db7207d1e917c2e02c56b2c105b397cb41cc5232376d1a2" name="python311-fluidity-sm" arch="noarch">
  <version epoch="0" ver="0.2.0" rel="150400.10.7.2"/>
  <changelog author="tchvatal@suse.com" date="1533988800">- Initial package, required by python-invoke, was bundled</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="20194eed78a6f577dc8f861a1eccce4fd92d8272b59bf11a40097645f12d2d59" name="python311-frozenlist" arch="aarch64">
  <version epoch="0" ver="1.3.3" rel="150400.9.7.2"/>
  <changelog author="jayvdb@gmail.com" date="1606651200">- Initial spec for v1.1.1</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 1.2.0
  * FrozenList now supports being used as a generic type as per PEP
    585, e.g. frozen_int_list: FrozenList[int] (requires Python 3.9
    or newer). #172
  * Added support for Python 3.10. #227
  * Started shipping platform-specific wheels with the musl tag
    targeting typical Alpine Linux runtimes. #227
  * Started shipping platform-specific arm64 wheels for Apple
    Silicon. #227
- Cythonize
- Required by some aio packages.</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 1.3.0:
  * Do not install C sources with binary distributions.
  * Dropped Python 3.6 support</changelog>
  <changelog author="yarunachalam@suse.com" date="1664366400">- update to 1.3.1
  * The published source distribution package became buildable under Python 3.11.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 1.3.3
  * Fixed CI runs when creating a new release, where new towncrier versions fail
    when the current version section is already present.
- Update to 1.3.2
  * Misc
    Updated the CI runs to better check for test results and to avoid
    deprecated syntax. #327</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="5b612c1cb1875d31fe49996c55df633453997621c238c11ce2249dc331bfa638" name="python311-frozenlist" arch="ppc64le">
  <version epoch="0" ver="1.3.3" rel="150400.9.7.2"/>
  <changelog author="jayvdb@gmail.com" date="1606651200">- Initial spec for v1.1.1</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 1.2.0
  * FrozenList now supports being used as a generic type as per PEP
    585, e.g. frozen_int_list: FrozenList[int] (requires Python 3.9
    or newer). #172
  * Added support for Python 3.10. #227
  * Started shipping platform-specific wheels with the musl tag
    targeting typical Alpine Linux runtimes. #227
  * Started shipping platform-specific arm64 wheels for Apple
    Silicon. #227
- Cythonize
- Required by some aio packages.</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 1.3.0:
  * Do not install C sources with binary distributions.
  * Dropped Python 3.6 support</changelog>
  <changelog author="yarunachalam@suse.com" date="1664366400">- update to 1.3.1
  * The published source distribution package became buildable under Python 3.11.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 1.3.3
  * Fixed CI runs when creating a new release, where new towncrier versions fail
    when the current version section is already present.
- Update to 1.3.2
  * Misc
    Updated the CI runs to better check for test results and to avoid
    deprecated syntax. #327</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="e9dd3e4b168895e4e4b15476ec21dc05cea8b72f8b8880aac47ba0379c81deab" name="python311-frozenlist" arch="s390x">
  <version epoch="0" ver="1.3.3" rel="150400.9.7.2"/>
  <changelog author="jayvdb@gmail.com" date="1606651200">- Initial spec for v1.1.1</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 1.2.0
  * FrozenList now supports being used as a generic type as per PEP
    585, e.g. frozen_int_list: FrozenList[int] (requires Python 3.9
    or newer). #172
  * Added support for Python 3.10. #227
  * Started shipping platform-specific wheels with the musl tag
    targeting typical Alpine Linux runtimes. #227
  * Started shipping platform-specific arm64 wheels for Apple
    Silicon. #227
- Cythonize
- Required by some aio packages.</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 1.3.0:
  * Do not install C sources with binary distributions.
  * Dropped Python 3.6 support</changelog>
  <changelog author="yarunachalam@suse.com" date="1664366400">- update to 1.3.1
  * The published source distribution package became buildable under Python 3.11.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 1.3.3
  * Fixed CI runs when creating a new release, where new towncrier versions fail
    when the current version section is already present.
- Update to 1.3.2
  * Misc
    Updated the CI runs to better check for test results and to avoid
    deprecated syntax. #327</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="6e24f0bfb19476e540fe2eea171f9925e628b7212b3d456249cf8053e068de93" name="python311-frozenlist" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="150400.9.7.2"/>
  <changelog author="jayvdb@gmail.com" date="1606651200">- Initial spec for v1.1.1</changelog>
  <changelog author="code@bnavigator.de" date="1639224000">- Update to 1.2.0
  * FrozenList now supports being used as a generic type as per PEP
    585, e.g. frozen_int_list: FrozenList[int] (requires Python 3.9
    or newer). #172
  * Added support for Python 3.10. #227
  * Started shipping platform-specific wheels with the musl tag
    targeting typical Alpine Linux runtimes. #227
  * Started shipping platform-specific arm64 wheels for Apple
    Silicon. #227
- Cythonize
- Required by some aio packages.</changelog>
  <changelog author="dmueller@suse.com" date="1642939200">- update to 1.3.0:
  * Do not install C sources with binary distributions.
  * Dropped Python 3.6 support</changelog>
  <changelog author="yarunachalam@suse.com" date="1664366400">- update to 1.3.1
  * The published source distribution package became buildable under Python 3.11.</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 1.3.3
  * Fixed CI runs when creating a new release, where new towncrier versions fail
    when the current version section is already present.
- Update to 1.3.2
  * Misc
    Updated the CI runs to better check for test results and to avoid
    deprecated syntax. #327</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="151270c93029bff587e773a2dac75ebcfc2bcf57bb400b3359a1d38b1ddbbb86" name="python311-humanfriendly" arch="noarch">
  <version epoch="0" ver="10.0" rel="150400.13.7.4"/>
  <changelog author="mardnh@gmx.de" date="1476100800">- Update to version 2.1
  * Release 2.1: Support for sanitizing terminal output
  * Support for sanitizing terminal output
  * Merge #12: Update README.rst for new unit behaviour
  * Update README.rst for new unit behaviour
  * Release 2.0: Proper support for IEEE 1541 definitions of units? (fixes #4, merges #8 and #9)
  * Proper support for IEEE 1541 definitions of units?
  * Merge #9: Add note about IEEE 1541 definitions of units
  * Merge #8: Allow correct behavior of 'parse_size' and 'format_size'
  * Stop clearing coverage data on Travis CI :-)
  * Release 1.44.9 (fixes #10 and #11)
  * Restore Python 2.6 compatibility (#10 and #11)
  * Resolve timespan formatting issues (#10 and #11)
  * Reproduce timespan formatting issues reported in #10 and #11
  * Refactor makefile, switch to py.test, wheel support, etc.
  * Release 1.44.8 (fixes #7)
  * Don't test tags on Travis CI
  * Fix issue #7
  * Reproduce issue #7 in test suite
  * Minor improvements to setup script
  * Add note about IEEE 1541 definitions of units
  * Added unit tests
  * Implemented correct handling of prefixes based on IEEE 1540
- Fix source url
- Minor specfile cleanup</changelog>
  <changelog author="toddrme2178@gmail.com" date="1504699200">- Implement single-spec version.
- Update to version 4.4.1
  * No changelog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Update to version 4.8
  * Add coerce_pattern() function
  * Improve code consistency
- From version 4.7
  * Support background colors and 256 color mode
  * Tests for output(), message() and warning()
- From version 4.6
  * Support for bright terminal colors
- From version 4.5
  * Extend byte ranges, add RAM output to command line
- From version 4.4.2
  * Reduce clock source sensitivity* (MacOS on Travis CI)
  * Fix `Double requirement given' error
  * Try to fix Python 2.6 tests on Travis CI
  * Change Sphinx documentation theme
  * Bump copyright
  * Try to enable MacOS builds on Travis CI
  * Fix ImportError exception on Windows
- From version 4.4.1
  * Include docs to sdist
  * PEP-8 fail
  * Change cli test from 1.05 mm to 1.05 km
  * Another correction to test_cli
  * Corrected CLI format_length test
  * Aim for more CLI coverage
  * Add CLI tests for format-byte
  * Added size test cases
  * Size 1z is now valid
- From version 4.4
  * Add touch() to __all__
  * Make touch() create intermediate directories
  * Add humanfriendly.testing.touch() function
- From version 4.3
  * Don't log duplicate output in run_cli()
- From version 4.2
  * Reconfigure logging in run_cli()
- From version 4.1
  * Always log stderr as well in run_cli()
- From version 4.0
  * Improve humanfriendly.testing.run_cli() (backwards incompatible)
- From version 3.8
  * Make it easy to mock the $HOME directory
- From version 3.7
  * Customizable skipping of tests
  * Added .pyc to .gitignore
  * Added Exa, Zetta &amp; Yotta prefixes and tests
  * Added -S --format-bytes option to use powers of 1024 rather than 1000 from command line.
- From version 3.6.1
  * Improve robustness of Patched{Attribute,Item}
- From version 3.6
  * Make retry limit configurable
  * Refactor makefile and Travis CI configuration
- From version 3.5
  * Bug fix for TestCase.assertRaises()
  * Enhance TestCase.assertRaises()
- From version 3.4.1
  * Bug fix for Python 3 syntax incompatibility
- From version 3.4
  * Promote command line test function to public API
- From version 3.3
  * Add humanfriendly.testing module (unittest helpers)
  * Add humanfriendly.text.random_string() function
  * Define humanfriendly.text.__all__
  * Reorder functions in humanfriendly.text alphabetically
- From version 3.2
  * Auto-encode terminal output to avoid encoding errors
  * Remove unused import
- From version 3.1
  * Improve usage message parsing and rendering
- From version 3.0
  * Add Python 3.6 to tested versions
  * Silence flake8 complaints
  * Add min, mins tests
  * Support min, mins abbreviations for minutes
- From version 2.4
  * Restore Python 3 compatibility
  * Make usage() and show_pager() more user friendly
  * Remove redundant :py: prefixes in docstrings
  * Improve docstrings in setup.py
- From version 2.3.2
  * Bug fix: Don't hard code conditional dependencies in wheels
- From version 2.3.1
  * Fix parse_usage() tripping up on commas in option labels
  * Break test suite to reproduce parse_usage() bug
- From version 2.3
  * Switch to monotonic clock for timers
  * Bump copyright
  * Minor improvements to setup script
  * Improve intersphinx references
  * s/readthedocs.org/readthedocs.io/g
- From version 2.2.1
  * Fix timers being awkward as context managers
  * Reproduce timers being awkward as context managers
  * Minor improvements to reStructuredText in docstrings
- From version 2.2
  * Fix parse_date() choking on Unicode strings
  * Reproduce parse_date() bug in test suite
  * Fix flake8 warning
  * Only use readline hints in prompts when stdin is tty</changelog>
  <changelog author="ms@suse.com" date="1534248000">- Submission to SUSE:SLE-12-SP3:Update:PubClouds
  This commit tracks the submission for fate#326575
  and bsc#1103542</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update to 4.16.1:
  * Added humanfriendly.text.compact_empty_lines() function.
  * Enable optional html_to_ansi(data[, callback]) argument.
  * Added a code sample and screenshot to the HTMLConverter documentation.
  * Emit vertical whitespace for block tags like &lt;div&gt;, &lt;p&gt; and &lt;pre&gt; and post-process the generated output in __call__() to compact empty lines.
  * Don’t pre-process preformatted text using the user defined text callback.
  * Improve robustness against malformed HTML (previously an IndexError would be raised when a closing &lt;/a&gt; tag was encountered without a corresponding opening &lt;a&gt; tag).
  * Emit an ANSI reset code when HTMLConverter.close() is called and a style is still active (improves robustness against malformed HTML).
  * Support for 24-bit (RGB) terminal colors. Works by accepting a tuple or list with three integers representing an RGB (red, green, blue) color.
  * Support for italic text rendering on the terminal.
  * Make format_timespan() accept datetime.timedelta objects (fixes #27).
  * Add license key to setup.py script (pointed out to me in coloredlogs pull request #53).
  * Added the Timer.sleep() method to sleep “no more than” the given number of seconds.
  * Added the format_rst_table() function to render RST (reStructuredText) tables.
- Enable and make sure tests are run</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Move the Name declaration above lua code to work on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1548936000">- Update to 4.17:
  * compatibility with python 3.7</changelog>
  <changelog author="tchvatal@suse.com" date="1552392000">- Update to 4.18:
  * Added humanfriendly.text.generate_slug() function.
  * Fixed "invalid escape sequence" DeprecationWarning (pointed out by Python &gt;= 3.6).</changelog>
  <changelog author="tchvatal@suse.com" date="1553860800">- Simplify the multibuild conditioning and name creation</changelog>
  <changelog author="tchvatal@suse.com" date="1576065600">- Require full python stack for sqlite module</changelog>
  <changelog author="mcepl@suse.com" date="1581768000">- Update to 6.1:
  - Added a :pypy:`...` role for easy linking to packages on the
    Python Package Index, for details refer to
    :func:`humanfriendly.sphinx.pypi_role()`.
  - Wasted quite a bit of time debugging a MacOS failure on
    Travis CI caused by a broken man`pip` installation, fixed by
    using get-pip.py to bootstrap an installation that actually
    works wink.
  - Enable :class:`~humanfriendly.testing.MockedProgram` to
    customize the shell script code of mocked programs. This was
    added to make it easy to mock a program that is expected to
    generate specific output (I'm planning to use this in the
    :pypi:`linux-utils` test suite).
  - Defined __all__ for all public modules that previously lacked
    "export control" and decided to bump the major version number
    as a precaution:
  - These changes should not have any impact on backwards
    compatibility, unless I forgot entries, in which case
    callers can get :exc:`~exceptions.ImportError`
    exceptions...
  - Imports of public modules were previously exported
    (implicitly) and this pollutes code completion suggestions
    which in turn can encourage bad practices (not importing
    things using their "canonical" name).
  - I started developing the humanfriendly package years before
    I learned about the value of defining __all__ and so some
    modules lacked a definition until now. I decided that now
    was as good a time as any to add those definitions
    innocent.
  - Simplified the headings in docs/api.rst so that only the
    module names remain. This was done because Sphinx doesn't
    support nested links in HTML output and thus generated really
    weird "Table of Contents" listings.
  - Fixed the reStructuredText references in the documentation of
    :func:`~humanfriendly.prompts.prompt_for_choice()`. This
    function is imported from :mod:`humanfriendly.prompts` to
    :mod:`humanfriendly` (for backwards compatibility) where it
    can't use relative references to refer to the other functions
    in the :mod:`humanfriendly.prompts` module.
  - Embedded quite a few Python API references into recent
    changelog entries, just because I could (I heart what
    hyperlinks can do for the usability of technical
    documentation, it gives a lot more context).
  - Added custom :man:`...` role for easy linking to Linux manual
    pages to the :mod:`humanfriendly.sphinx` module.
  - Changed rendering of pretty tables to expand tab characters
    to spaces: Until now pretty tables did not take the variable
    width of tab characters into account which resulted in tables
    whose "line drawing characters" were visually misaligned.
    Tabs are now expanded to spaces using str.expandtabs().
  - Stop testing on Python 2.6 and drop official support. The
    world (including Travis CI) has moved on and preserving
    Python 2.6 compatibility was clearly starting to drag the
    project down...
  - I decided to bump the major version number because each of
    these changes can be considered backwards incompatible in one
    way or another and version numbers are cheap anyway so there
    stuck_out_tongue.</changelog>
  <changelog author="mcalabkova@suse.com" date="1585569600">- Update to 8.1
  * Make it possible to opt out of the output capturing that
    :func:`humanfriendly.testing.run_cli()` sets up by default.
  * Improve feature parity between :class:`humanfriendly.testing.CaptureOutput`
    and my :pypi:`capturer` package to the point where most of the
    :pypi:`humanfriendly` test suite can now run without :pypi:`capturer`.
  * Refactored the test suite to import all names separately instead of referring
    to identifiers via their modules (my preferences have changed since this code
    was written a long time ago).
  * Adopt :func:`functools.wraps()` to make decorator functions more robust.
  * Make the :class:`~humanfriendly.terminal.spinners.Spinner` class more
    customizable. The interval at which spinners are updated and the characters
    used to draw the animation of spinners can now be customized by callers.
    This was triggered by `executor issue #2`_.
  * Improve test skipping based on exception types.
  * The "deprecated imports" feature provided by :mod:`humanfriendly.deprecation`
    has been adopted to clean up the maze of (almost but not quite) cyclic import
    dependencies between modules.
  * HTML to ANSI functionality has been extracted to a new
    :mod:`humanfriendly.terminal.html` module.
  * Support for spinners has been extracted to a new
    :mod:`humanfriendly.terminal.spinners` module.
  * The use of positional arguments to initialize
    :class:`~humanfriendly.terminal.spinners.Spinner` objects has been deprecated
    using the new :func:`humanfriendly.deprecation.deprecated_args()` decorator
    function.
  * Added the :func:`humanfriendly.deprecation.deprecated_args()` decorator function
    which makes it easy to switch from positional arguments to keyword arguments
    without dropping backwards compatibility.
  * Accept pluralized disk size units (`#26`_). I'm not claiming this is a full
    solution to the problem, far from it. It does lessen the pain a bit (IMHO).
  * Make sure the selected pager is available before trying to run it. While
    testing :pypi:`humanfriendly` on Windows 10 I noticed that ``humanfriendly
  * -help`` resulted in nothing but a traceback, because :man:`less` wasn't
    available. That's not human friendly at all 😕 (even if it is Windows 😈).
  * Merge pull request `#24`_: Fix bug in :func:`~humanfriendly.parse_length()` that rounded floats.
  * Merge pull request `#32`_: Update hyperlinks in readme.
  * Merge pull request `#33`_: Drop support for Python 2.6 and 3.0-3.4
  * Merge pull request `#35`_: SVG badge in readme.
  * Merge pull request `#36`_: Add support for nanoseconds and microseconds time units
  * Fixed :func:`~humanfriendly.tables.format_rst_table()` omission from
    ``humanfriendly.tables.__all__``.
  * Start testing on Python 3.8 and 3.9-dev.
  * Emit an ANSI reset code when :func:`humanfriendly.terminal.html.HTMLConverter.close()`
  * Added the :func:`humanfriendly.terminal.html_to_ansi()` function which is a
  * Added ``humanfriendly.testing.TestCase.assertRaises()`` enhancements.
  * Define ``humanfriendly.text.__all__``.</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1629201600">- Update to 9.2
  Maintenance release:
  * Merged pull request `#46`_ which fixes several :pypi:`flake8` warnings.
  * Merged pull request `#49`_ which marks Python 3.9 support final.
  * Merged pull request `#51`_ which helps to stabilize the test suite.
  * Merged pull request `#52`_ which updates the :mod:`humanfriendly.sphinx`
    module to include Sphinx extension metadata that has become mandatory in a
    recent Sphinx release. After merging the pull request I added additional
    metadata including the version.
- from version 9.1
  * Added :func:`~humanfriendly.compat.on_macos()` function to detect Apple MacOS
    (I need this in an upcoming :pypi:`coloredlogs` release and don't want to have
    to think about how to detect MacOS again in the future 😇).
- from version 9.0
  The major version number was bumped because the bug fix for
  :func:`~humanfriendly.text.pluralize()` is backwards incompatible
  and (even though this seems like very "cosmetic" functionality)
  version numbers are cheap, so who cares 😉.
  * *Bug fixes:**
  * Changed :func:`~humanfriendly.format_number()` to properly support negative
    numbers (as suggested in `issue #40`_).
  * Changed :func:`~humanfriendly.text.pluralize()` to generate "1.5 seconds"
    instead of "1.5 second" (as suggested in `issue #43`_).
  * *Enhancements:**
  * Enhanced :func:`~humanfriendly.text.concatenate()` to support ``conjunction``
    and ``serial_comma`` keyword arguments (as suggested in `issue #30`_).
  * Added :func:`~humanfriendly.text.pluralize_raw()` to select singular or
    plural form without prefixing the count to the text that is returned.
- from version 8.2
  * Added a simple case insensitive dictionary implementation, for details refer to
    the new :mod:`humanfriendly.case` module.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to 10.0
  * *Noteworthy changes:**
  * Merged pull request `#45`_ to resolve the issue caused by the conditional
    :pypi:`pyreadline` requirement on Windows not supporting Python 3.9+.
  * Updated the readme to use Python 3 in the example (reported in issue `#56`_).
    Also added a mention of the ``humanfriendly --demo`` command.
  * Removed the ``humanfriendly.compat.unittest`` alias that presumably no-one is
    using at this point; it had been rendered useless quite a long time ago
    (requested in issue `#53`_).
  * *Internal changes:**
  * Merged pull request `#54`_ which migrates the :pypi:`humanfriendly` project
    from Travis CI to GitHub Actions and from Coveralls.io to Codecov.
  * Fixed a deprecation warning concerning ``setup.cfg`` and some Sphinx
    documentation errors.</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- do not require mock for build
- added patches
  fix https://github.com/xolox/python-humanfriendly/issues/62
  + python-humanfriendly-no-mock.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1659096000">- Add patch pytest-7-support.patch:
  * Support pytest &gt;= 7.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1659441600">- Remove unneeded BuildRequires on mock.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="d4169f3882a2f79ff788d0ad291229a52e7b400a65f41ebbf7d1d311fc41537a" name="python311-hyperlink" arch="noarch">
  <version epoch="0" ver="21.0.0" rel="150400.12.7.4"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- initial packaging (version 17.2.1)</changelog>
  <changelog author="jengelh@inai.de" date="1499169601">- Replace description.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1558440000">- version update to 19.0.0
  * When passed to `str()` URLs now stringify to usable URL
    strings. (See #49)
  * Switched off of Python's built-in IDNA facilities to using the
    [idna](https://pypi.python.org/pypi/idna) package. Not only is it
    much more modern, it's also much more strict and correct in its
    output. (See #19 and #56)
  * Added new `DecodedURL` type with almost-identical API to the normal
    `URL`, except that it automatically handles reserved characters in
    argument values passed to its methods. (See #6, #11, #44)
  * Added top-level `parse()` convenience function that now represents
    the main entrypoint to hyperlink.
  * Accept dictionaries as ‘query=’ arguments, in addition to
    sequences of tuples (see #50)
  * `URL.child()` will no longer fail when child gets no segments (#42 and #43)
  * `URL.normalize()` now supports encoding stray/unmatched `%` characters
    in character-encoded fields (userinfo, path, query string, fragment)
    (see #61, #62)</changelog>
  <changelog author="tchvatal@suse.com" date="1558526400">- Add missing runtime dependency on idna</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 20.0.1:
  * CPython 3.7 and 3.8 and PyPy3 added to test matrix
  * Hyperlink now has type hints and they are now exported per
  [PEP 561](https://www.python.org/dev/peps/pep-0561/).
  * Several bugs related to hidden state were fixed, making it so that all data
  on a `URL` object (including `rooted` and `uses_netloc`) is reflected by and
  consistent with its textual representation.
  This does mean that sometimes these constructor arguments are ignored, if it
  would create invalid or unparseable URL text.</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- update to 21.0.0:
  * Update plus sign (+) handling to work with/like HTML form encoding (POST)
    by default, fixes #129, and associated roundtripping (#146).
  * Package IDNA tables.
  * Long overdue dependency bumps</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="aca4e2af2a93daab2ef308b0789b30a839e032acb7577232c7c3349ea5064193" name="python311-idna" arch="noarch">
  <version epoch="0" ver="3.4" rel="150400.11.10.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * update copyright year
- update to version 2.7:
  * Update to Unicode 10.0.0.
  * No longer accepts dot-prefixed domains (e.g. ".example") as
    valid. This is to be more conformant with the UTS 46 spec. Users
    should strip dot prefixes from domains before processing.</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Update to version 2.8
  * Update to Unicode 11.0.0.
  * Provide more specific exceptions for some malformed labels.
- Add fdupes</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 2.9:
  - Update to Unicode 12.1.0.
  - Prohibit A-labels ending with a hyphen (Thanks, Julien Bernard!)
  - Future-proofing: Test on Python 3.7 and 3.8, don't immediately
    fail should Python 4 come along.
-   Made BSD 3-clause license clearer</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 2.10:
  - Update to Unicode 13.0.0.
  - Throws a more specific exception if "xn--" is provided as a label.
  - This is expected to be the last version that supports Python 2.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 3.1:
  - Ensure license is included in package (Thanks, Julien Schueller)
  - No longer mark wheel has universal (Thanks, Matthieu Darbois)
  - Test on PowerPC using Travis CI
  - Python 2 is no longer supported (the 2.x branch supports Python 2,
    use "idna&lt;3" in your requirements file if you need Python 2 support)
  - Support for V2 UTS 46 test vectors.</changelog>
  <changelog author="pgajdos@suse.com" date="1622030400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.2:
  * Add type hints (Thanks, Seth Michael Larson!)
  * Remove support for Python 3.4</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.3:
  - Update to Unicode 14.0.0
  - Update to in-line type annotations
  - Throw IDNAError exception correctly for some malformed input
  - Advertise support for Python 3.10
  - Improve testing regime on Github
  - Fix Russian typo in documentation</changelog>
  <changelog author="kastl@b1-systems.de" date="1656590400">- add version constraint for python-rpm-macros &gt;= 20220106.80d3756,
  otherwise this fails to build on 15.3 at '%pyunittest discover -v'</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 3.4:
  * Update to Unicode 15.0.0
  * Migrate to pyproject.toml for build information (PEP 621)
  * Correct another instance where generic exception was raised instead of
    IDNAError for malformed input
  * Source distribution uses zeroized file ownership for improved
    reproducibility</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="aa7f3b80d35dc85dfb708196847244accd1c1c7d0fa648a2b0071a0ce80b3bdb" name="python311-importlib-metadata" arch="noarch">
  <version epoch="0" ver="6.8.0" rel="150400.10.9.2"/>
  <changelog author="dmueller@suse.com" date="1614686400">- update to 3.7.0:
  * #131: Added ``packages_distributions`` to conveniently
    resolve a top-level package or module to its distribution(s).
  * #284: Introduces new ``EntryPoints`` object, a tuple of
    ``EntryPoint`` objects but with convenience properties for
    selecting and inspecting the results:
  - ``.select()`` accepts ``group`` or ``name`` keyword
    parameters and returns a new ``EntryPoints`` tuple
    with only those that match the selection.
  - ``.groups`` property presents all of the group names.
  - ``.names`` property presents the names of the entry points.
  - Item access (e.g. ``eps[name]``) retrieves a single
    entry point by name.
    ``entry_points`` now accepts "selection parameters",
    same as ``EntryPoint.select()``.
    ``entry_points()`` now provides a future-compatible
    ``SelectableGroups`` object that supplies the above interface
    but remains a dict for compatibility.
    In the future, ``entry_points()`` will return an
    ``EntryPoints`` object, but provide for backward
    compatibility with a deprecated  ``__getitem__``
    accessor by group and a ``get()`` method.
    If passing selection parameters to ``entry_points``, the
    future behavior is invoked and an ``EntryPoints`` is the
    result.
    Construction of entry points using
    ``dict([EntryPoint, ...])`` is now deprecated and raises
    an appropriate DeprecationWarning and will be removed in
    a future version.
  * #280: ``entry_points`` now only returns entry points for
    unique distributions (by name).</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 3.7.2:
  * Cleaned up cruft in entry_points docstring.
  * Internal refactoring to facilitate ``entry_points() -&gt; dict``
    deprecation.</changelog>
  <changelog author="code@bnavigator.de" date="1632139200">- Update to v4.8.1
  * #348: Restored support for EntryPoint access by item,
    deprecating support in the process. Users are advised to use
    direct member access instead of item-based access:
  - ep[0] -&gt; ep.name
  - ep[1] -&gt; ep.value
  - ep[2] -&gt; ep.group
  - ep[:] -&gt; ep.name, ep.value, ep.group
- Release v4.8.0
  * #337: Rewrote EntryPoint as a simple class, still immutable
    and still with the attributes, but without any expectation for
    namedtuple functionality such as _asdict.
- Release v4.7.1
  * #344: Fixed regression in packages_distributions when neither
    top-level.txt nor a files manifest is present.
- Release v4.7.0
  * #330: In packages_distributions, now infer top-level names
    from .files() when a top-level.txt (Setuptools-specific
    metadata) is not present.
- Release v4.6.4
  * #334: Correct SimplePath protocol to match pathlib protocol
    for __truediv__.
- Release v4.6.3
  * Moved workaround for #327 to _compat module.
- Release v4.6.2
  * bpo-44784: Avoid errors in test suite when DeprecationWarnings
    are treated as errors.
- Release v4.6.1
  * #327: Deprecation warnings now honor call stack variance on
    PyPy.
- Release v4.6.0
  * #326: Performance tests now rely on pytest-perf. To disable
    these tests, which require network access and a git checkout,
    pass -p no:perf to pytest.
- Release v4.5.0
  * #319: Remove SelectableGroups deprecation exception for flake8.
- Release v4.4.0
  * #300: Restore compatibility in the result from Distribution.
    entry_points (EntryPoints) to honor expectations in older
    implementations and issuing deprecation warnings for these
    cases:
  * EntryPoints objects are once again mutable, allowing for sort
    () and other list-based mutation operations. Avoid deprecation
    warnings by casting to a mutable sequence (e.g. list(dist.
    entry_points).sort()).
  * EntryPoints results once again allow for access by index. To
    avoid deprecation warnings, cast the result to a Sequence
    first (e.g. tuple(dist.entry_points)[0]).
- Release v4.3.1
  * #320: Fix issue where normalized name for eggs was incorrectly
    solicited, leading to metadata being unavailable for eggs.
- Release v4.3.0
  * #317: De-duplication of distributions no longer requires
    loading the full metadata for PathDistribution objects, entry
    point loading performance by ~10x.
- Release v4.2.0
  * Prefer f-strings to .format calls.
- Release v4.1.0
  * #312: Add support for metadata 2.2 (Dynamic field).
  * #315: Add SimplePath protocol for interface clarity in
    PathDistribution.
- Release v4.0.1
  * #306: Clearer guidance about compatibility in readme.
- Release v4.0.0
  * #304: PackageMetadata as returned by metadata() and
    Distribution.metadata() now provides normalized metadata
    honoring PEP 566:
  * If a long description is provided in the payload of the RFC
    822 value, it can be retrieved as the Description field.
  * Any multi-line values in the metadata will be returned as such.
  * For any multi-line values, line continuation characters are
    removed. This backward-incompatible change means that any
    projects relying on the RFC 822 line continuation characters
    being present must be tolerant to them having been removed.
  * Add a json property that provides the metadata converted to a
    JSON-compatible form per PEP 566.
- Release v3.10.1
  * Minor tweaks from CPython.
- Release v3.10.0
  * #295: Internal refactoring to unify section parsing logic.
- Release v3.9.1
  * #296: Exclude 'prepare' package.
  * #297: Fix ValueError when entry points contains comments.
- Release v3.9.0
  * Use of Mapping (dict) interfaces on SelectableGroups is now
    flagged as deprecated. Instead, users are advised to use the
    select interface for future compatibility.
  * Suppress the warning with this filter: ignore:SelectableGroups
    dict interface.
  * Or with this invocation in the Python environment: warnings.
    filterwarnings('ignore', 'SelectableGroups dict interface').
  * Preferably, switch to the select interface introduced in
    3.7.0. See the entry points documentation and changelog for
    the 3.6 release below for more detail.
  * For some use-cases, especially those that rely on importlib.
    metadata in Python 3.8 and 3.9 or those relying on older
    importlib_metadata (especially on Python 3.5 and earlier),
    backports.entry_points_selectable was created to ease the
    transition. Please have a look at that project if simply
    relying on importlib_metadata 3.6+ is not straightforward.
    Background in #298.
  * #283: Entry point parsing no longer relies on ConfigParser and
    instead uses a custom, one-pass parser to load the config,
    resulting in a ~20% performance improvement when loading entry
    points.
- Release v3.8.2
  * #293: Re-enabled lazy evaluation of path lookup through a
    FreezableDefaultDict.
- Release v3.8.1
  * #293: Workaround for error in distribution search.
- Release v3.8.0
  * #290: Add mtime-based caching for FastPath and its lookups,
    dramatically increasing performance for repeated distribution
    lookups.
- Release v3.7.3
  * Docs enhancements and cleanup following review in GH-24782.</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 4.8.2:
  * #353: Fixed discovery of distributions when path is empty.</changelog>
  <changelog author="mcepl@suse.com" date="1640952000">- Update to 4.10.0:
  - #354: Removed Distribution._local factory. This
    functionality was created as a demonstration of the possible
    implementation. Now, the pep517 package provides this
    functionality directly through pep517.meta.load.
  - Require Python 3.7 or later.
  - #357: Fixed requirement generation from egg-info when a URL
    requirement is given.</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 4.10.1:
  - #361: Avoid potential REDoS in ``EntryPoint.pattern``.</changelog>
  <changelog author="dmueller@suse.com" date="1652097600">- update to 4.11.3:
  * #372: Removed cast of path items in FastPath, not needed.
  * #369: Fixed bug where ``EntryPoint.extras`` was returning
    match objects and not the extras strings.
  * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt``
    is empty, return an empty list.
  * bpo-46246: Added ``__slots__`` to ``EntryPoints``.
  * #365 and bpo-46546: Avoid leaking ``method_name`` in
    ``DeprecatedList``.</changelog>
  <changelog author="code@bnavigator.de" date="1652184000">- Prevent build for Python 3.6 which is not supported anymore
- Remove override to use deprecated setuptools usage</changelog>
  <changelog author="dmueller@suse.com" date="1654430400">- update to 4.11.4:
  * #379: In ``PathDistribution._name_from_stem``, avoid including
  parts of the extension in the result.
  * #381: In ``PathDistribution._normalized_name``, ensure names
  loaded from the stem of the filename are also normalized, ensuring
  duplicate entry points by packages varying only by non-normalized
  name are hidden.</changelog>
  <changelog author="dmueller@suse.com" date="1658750400">- update to 4.12.0:
  * py-93259: Now raise ``ValueError`` when ``None`` or an empty
    string are passed to ``Distribution.from_name`` (and other
    callers).</changelog>
  <changelog author="yarunachalam@suse.com" date="1666958400">- Update to version 5.0.0
  * #97, #284, #300: Removed compatibility shims for deprecated entry point interfaces.
- Update to version 4.13.0
  * #396: Added compatibility for PathDistributions originating from Python 3.8 and 3.9.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670328000">- Update to versino 5.1.0
  [#415]: Instrument SimplePath with generic support.</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.0:
  * #419: Declared ``Distribution`` as an abstract class, enforcing
  definition of abstract methods in instantiated subclasses. It's no
  longer possible to instantiate a ``Distribution`` or any subclasses
  unless they define the abstract methods.
  * #371: Deprecated expectation that ``PackageMetadata.__getitem__``
  will return ``None`` for missing keys. In the future, it will raise a
  ``KeyError``.</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 6.1.0:
  * ``packages_distributions`` now honors packages and
    modules with Python modules that not ``.py`` sources (e.g.
    ``.pyc``, *   ``.so``).
  * #434: Expand protocol for ``PackageMetadata.get_all`` to
    match the upstream implementation of ``email.message.Message.get_all``
    in python/typeshed#9620.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1680523200">- Remove unneeded BuildRequires on pep517.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 6.3.0:
  * #115: Support ``installed-files.txt`` for
    ``Distribution.files`` when present.
  * #442: Fixed issue introduced in v6.1.0 where non-importable
  * names (metadata dirs) began appearing in ``packages_distributions``.
  * #384: ``PackageMetadata`` now stipulates an additional
    ``get`` method allowing for easy querying of metadata keys that may
    not be present</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 6.6.0:
  * Expanded type annotations.
  * python/cpython#103661: Removed excess error suppression in
    ``_read_files_egginfo_installed`` and fixed path handling
    on Windows.
  * #422: Removed ABC metaclass from ``Distribution`` and instead
    deprecated construction of ``Distribution`` objects without
    concrete methods.
  * Updated docs with tweaks from upstream CPython.
  * Consolidated some behaviors in tests around ``_path``.
  * Added type annotation for ``Distribution.read_text``.</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 6.8.0:
  * Require Python 3.8 or later.
  * #453: When inferring top-level names that are importable for
    distributions in ``package_distributions``, now symlinks to
    other directories are honored.</changelog>
</package>
<package pkgid="833ffe6289e279b238db2a9fa5ae241fb8740b5f5a5c7d18ca1ddce832bb961a" name="python311-incremental" arch="noarch">
  <version epoch="0" ver="22.10.0" rel="150400.3.7.2"/>
  <changelog author="tbechtold@suse.com" date="1499169600">- Initial packaging (version 17.5.0)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1559736000">- run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Switch to multibuild to avoid build cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1588161600">- Skip two tests that fail due to changes in pytest framework
  needs to be fixed by upstream</changelog>
  <changelog author="dmueller@suse.com" date="1620561600">- update to 21.3.0:
  - The output of incremental is now compatible with Black (#56, #60)
  - Incremental now properly supports PEP 440-compliant dev, rc, post suffixes (#62)
  - Incremental now properly supports PEP 440-compliant post releases (#37)
  - Incremental will no longer attempt to read git or svn repositories to see if
    the project is running from a checkout. (#30, #31, #32)</changelog>
  <changelog author="dimstar@opensuse.org" date="1640260800">- Do not use %{python_module …} for suggests, as this would suggest
  all python flavors. Rather rely on the python singlespec macros
  to rewrite as needed.</changelog>
  <changelog author="dmueller@suse.com" date="1665921600">- update to 22.10.0:
  * Incremental now supports type-checking with Mypy (#69)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="fd12c053d9fcb962a4df2c18d064fc27c30b7aaac65fadd8167760b6a5638199" name="python311-invoke" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="150400.10.7.4"/>
  <changelog author="tchvatal@suse.com" date="1533988800">- Update to 1.1.1:
  * Various tweaks for pytest and new py releases support
- Switch to multibuild to run tests</changelog>
  <changelog author="tchvatal@suse.com" date="1533988801">- Add patch to not use vendored libs:
  * 0001-Make-test-fallback-to-system-modules-when-vendorized.patch
- Remove unneeded deps
- Remove the multibuild again as we no longer cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 1.2.0:
  * [Feature] #301: (via #414) Overhaul tab completion mechanisms so users can print a completion script which automatically matches the emitting binary’s configured names (compared to the previous hardcoded scripts, which only worked for inv/invoke by default). Thanks to Nicolas Höning for the foundational patchset.</changelog>
  <changelog author="tchvatal@suse.com" date="1563537600">- Restrict pytest5 and pytest4 for now upstream tests only with
  pytest3...</changelog>
  <changelog author="tchvatal@suse.com" date="1563969600">- Disable tests for now as they break with new pytest-relaxed
- Add another patch fixing errors with new pytest:
  * pytest4.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1565611200">- Update to version 1.3.0
  * Allow the configuration system to override which Executor
    subclass to use when executing tasks.
  * Add support for command timeouts, i.e. the ability to add an
    upper bound on how long a call to run may take to execute.
  * Add basic dry-run support, in the form of a new --dry CLI option.
  * Add a new Runner method, close_proc_stdin, and call it when
    standard input processing detects an EOF.</changelog>
  <changelog author="tchvatal@suse.com" date="1568721600">- Update patch pytest4.patch to make it really work with new pytests</changelog>
  <changelog author="mcalabkova@suse.com" date="1586865600">- Update to version 1.4.1
  * Fix an issue with `~invoke.run` &amp; friends having intermittent
    problems at exit time.
  * Many other fixes.</changelog>
  <changelog author="code@bnavigator.de" date="1602849600">- disable test suite with bcond because of unmaintained
  pytest-relaxed gh#bitprophet/pytest-relaxed#12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1629288000">- Update to version 1.6.0
  * Version bump for next release
  * Return to using print() and no newline in echo_format
  * Blacken
  * Changelog re #791
  * s/output_format/echo_format/g
  * Fix whitespace
  * Contact methods update :(
  * Adding support for a custom output format via run.echo
  * Fix typo
  * Tweak versionadded/changed bits for new param.
- from version 1.5.1
  * Alphabetize run() kwarg param declarations in docstring
  * Document dry kwarg for run() in docstring
  * Treat whitespace-only docstrings as empty docstrings.
- from version 1.5.0
  * Changelog, docstring and test tweak re #607, re #454
  * Tweaks re #611
  * Changelog re #409, re #398, re #611, re #580
  * Tweak #197 changelog to link to modified API member
  * Stop publishing bogus codecov reports from Travis
  * Docs and changelog re #197, closes #197
  * Realized OP's impl was overkill/caused bugs. Just set name.
  * Use identity testing in collection task lookup asserts
  * Refactor default task/collection collision &amp; enhanced its tests
  * Minor tweaks to update #197
  * Upgrade codecov client, prev version cannot talk to their object store
  * Fix small pile of minor doc reference errors
  * Changelog re coverage tweaks
  * Test Exit more thoroughly
  * Improve test coverage of Failure hierarchy repr()
  * Not sure why UnexpectedExit repr override __repr__ and not _repr
  * Blacken
  * Bump version for release/testing
  * Populate MockContext NotImplementedErrors with triggering command
  * Enhance MockContext a whole bunch
  * Enhance testing concepts doc
  * Python packaging guide is no longer using /en/latest URL
  * Blacken, flake8
  * Populate Result.command automatically within MockContext methods
  * Wrap MockContext methods in actual Mock when present
  * Expand sys.modules cleaner in conftest to clean EVERYTHING
  * Fix inaccurate indentation for MockContext versionadded directive
  * Needed to mark this bug major because it was in the 1.2 line which
    hasn't since gotten any bugfix releases
  * Grumble forgot a backported note
  * Add test: mismatched help text raises error
  * Add tests: parameter help defined with underscores
  * Cosmetic: satisfy black
  * Simplify if/else/if/else a bit
  * Fix bug if didn't give help for param.
  * Add error when gave help for typoed param #398
  * Fix help text behavior for params with underscores in name #409
  * Skip Path unit test if Path can't be imported
  * Clarify why we do str() on a possible str object
  * Make Travis happy for Python 2.7 and pypy
  * Satisfy flake8 compatibility
  * Allow Pathlib.path objects to be used with Context.cd()
  * Allow subcollections to be defaults of parent collections</changelog>
  <changelog author="code@bnavigator.de" date="1640692800">- Add fix-yaml-loader.patch, PyYAML 6 broke it.</changelog>
  <changelog author="pgajdos@suse.com" date="1651665600">- version update to 1.7.0
  * [Feature] #845: Env vars explicitly supplied to sudo (via its env kwarg) are now
    explicitly preserved via sudo’s --preserve-env argument. Patch courtesy of Benno Rice.
  * [Feature] #793: Add a new tasks.ignore_unknown_help config option for users who hand
    their tasks centrally-defined argument help dictionaries; it defaults to False but
    such users may set it to True to avoid exceptions. Thanks to @Allu2 for the report.
  * [Support]: Switch our continuous integration service from Travis-CI to Circle-CI,
    plus related and necessary updates to various administrative config files, management
    tasks and metadata. Including but not limited to:
  * Enhanced PyPI-level metadata/links
  * Split out tool config data from setup.cfg
  * Enhance execution &amp; coverage of unit vs integration tests under CI
  * [Support] #803: Upgrade our vendored PyYAML from 3.11 to 5.4.1; this should both
    supply a number of security fixes, and address problems loading project-level YAML
    config files under Python 3.10. Fix via Andreas Rammhold.
  * [Support]: Switch to using yaml.safe_load for loading config files. This avoids some
    warnings under newer PyYAML versions and is also, in a shocking twist, more secure.
- do not require python-mock for build, testsuite is not run
- modified patches
  % 0001-Make-test-fallback-to-system-modules-when-vendorized.patch (refreshed)
- deleted patches
  - fix-yaml-loader.patch (upstreamed)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.7.1:
  * :bug:`659` Improve behavior under ``nohup``, which causes stdin to become an
    undetectably-unreadable (but otherwise legit) file descriptor. Previously
    this led to `OSError` even if you weren't expecting anything on stdin; we now
    trap this specific case and silently ignore it, allowing execution to
    continue. Thanks to ``@kingkisskill`` for initial report and to Ryan Stoner
    for followup and workshopping.</changelog>
  <changelog author="dmueller@suse.com" date="1665921600">- update to 1.7.3:
  * Fix a non-fatal bug in our setup.py long_description generation causing
    1.7.0-1.7.2 to have malformed description text on PyPI.
  * Fix errors thrown when comparing Task objects to non-Task objects; such
    comparisons are now always false.
  * Refactor CLI parser instantiation such that the tasks.ignore_unknown_help
    feature (added in 1.7) works when Invoke is run in --complete mode, i.e. in
    tab-completion scripts.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1683806400">- Update to 2.1.0:
  - [Bug] #910: Add more rigor around subprocess/runner shutdown
    to avoid spurious exceptions &amp; also fix downstream issues in
    libraries like Fabric. Reported by Orlando Rodríguez.
  - [Bug] #934: The importlib upgrade in 2.1 had a corner case
    bug (regarding from . import &lt;submodule&gt; functionality within
    package-like task trees) which in turn exposed a false-pass
    in our test suite. Both have now been fixed. Thanks to Greg
    Meyer and Robert J. Berger for the bug reports.
  - [Bug] #910: Add more rigor around subprocess/runner shutdown
    to avoid spurious exceptions &amp; also fix downstream issues in
    libraries like Fabric. Reported by Orlando Rodríguez.
  - [Support] #901: (via #903) Tweak test suite setup methods to
    be named setup_method so pytest stops whining about it. Patch
    via Jesse P. Johnson.
  - [Bug] #376: Resolve equality comparison bug for
    non-collections. Patch via Jesse P. Johnson
  - [Support] #901: (via #903) Tweak test suite setup methods to
    be named setup_method so pytest stops whining about it. Patch
    via Jesse P. Johnson.
  - [Support] #906: Implement type hints and type checking
    tests with mypy to reduce errors and impove code
    documentation. Patches by Jesse P. Johnson and review by Sam
    Bull.
  - [Support] #675: Implement importlib and deprecate imp
    module. Patches provided by Jesse P. Johnson
  - [Support]: Task.argspec has changed its return value; it now
    returns an inspect.Signature derived from that of the task’s
    body callable.
  - Warning
    This change is backwards incompatible if you were using this
    method directly.
    [Support]: Remove support for, and imports related to,
    all Python versions less than 3.6 - including Python
    2. This also includes updates to vendored packages, such
    as removing six and upgrading lexicon to the latest
    version; and also treatment of things like Mock use within
    invoke.context.MockContext (which now expects stdlib’s
    unittest.mock instead of hunting for the old standalone mock
    library).
    This change is backwards incompatible in the following scenarios:
  - You use Python &lt;3.6. Shouldn’t be an issue as we now
    specify python_requires in packaging metadata.
  - You call invoke.util.encode_output manually for some
    reason. (This became a noop under Python 3, so just…remove
    it!)
  - You use invoke.context.MockContext; its repeat init kwarg
    changed its default value from False to True. This probably
    won’t bite you, but we mention it just in case you somehow
    relied upon the legacy behavior.
  - You subclass invoke.runners.Runner and/or have had to
    interact with its stop or stop_timer methods. The latter
    has been merged into the former, and if you are overriding
    stop, you’ll want to make sure you now call super()
    somewhere if you were not already.
- Remove upstreamed patches:
  - 0001-Make-test-fallback-to-system-modules-when-vendorized.patch
  - pytest4.patch
- Add remove-icecream.patch to remove unnecessary dependence on
  icecream module.
- Skip temporarily failing tests (gh#pyinvoke/invoke#705).</changelog>
  <changelog author="dmueller@suse.com" date="1684065600">- update to 2.1.1:
  * The `importlib` upgrade in 2.1 had a corner case
    bug (regarding ``from . import &lt;submodule&gt;`` functionality
    within package-like task trees  which in turn exposed a
    false-pass in our test suite. Both have now been fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1684238400">- break python-invocations, invoke cycle on tests</changelog>
  <changelog author="dmueller@suse.com" date="1684756800">- update to 2.1.2:
  * Make sure ``py.typed`` is in our packaging
    manifest; without it, users working from a regular
    installation can't perform type checks.</changelog>
</package>
<package pkgid="ab1ff56e1da78beb36ee0f2206fdf68019f2ac7a1f272ca6473e33148e49d7cb" name="python311-isodate" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="150400.12.7.2"/>
  <changelog author="benoit.monin@gmx.fr" date="1430913600">- update to version 0.5.1:
  * fixed pickling of Duration objects
  * raise ISO8601Error when there is no 'T' separator in datetime
    strings
- additional changes from version 0.5.0:
  * ISO8601Error are subclasses of ValueError now
  * improve compatibility across various python variants and
    versions
  * raise exceptions when using fractional years and months in date
    maths with durations
  * renamed method todatetime on Duraction objects to totimedelta
- pass -q to test to avoid spamming the build log
- rename README.txt to README.rst: changed upstream</changelog>
  <changelog author="tbechtold@suse.com" date="1485777600">- update to 0.5.4:
  - Fix parsing of Periods (Fabien Bochu)
  - Make Duration objects hashable (Geoffrey Fairchild)
  - Add multiplication to duration (Reinoud Elhorst)
- Use pypi.io as Source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493812800">- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- update to version 0.6.0:
  - Support incomplete month date (Fabien Loffredo)
  - Rely on duck typing when doing duration maths
  - Support ':' as separator in fractional time zones (usrenmae)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1537963200">- Include in SLE-15 (bsc#1109694)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1622030400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1636372800">- add six dependency</changelog>
  <changelog author="steven.kowalik@suse.com" date="1639396800">- Add patch coerce-decimal-to-int-python-310.patch:
  * Support Python 3.10.</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 0.6.1:
  * support python 3.10 ()
  * last version to support py 2.7
- drop coerce-decimal-to-int-python-310.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1666353600">- added patches
  https://github.com/gweis/isodate/commit/07d1602048083415bc22dc72cff152c9c2e0e021
  + python-isodate-no-six.patch</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="b857d23ece0059a99f846980740aa383e6bac4d6f5987ae4ba1cc32ed74f004c" name="python311-lexicon" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150400.10.7.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1520078400">- initial package for version 1.0.0
- add add_test_init.patch to fix execution of tests</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Update descriptions.</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Conflict with python-dns-lexicon that provides same namespace</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="steven.kowalik@suse.com" date="1631880000">- Update to 2.0.1:
  * Fix up some project metadata.
  * Dropped support for Python &lt;3.6
  * Added a _version submodule and imported its dunder-attributes into
    the top level module
  * Migrated CI to CircleCI (from Travis)
  * Migrated tests to pytest(-relaxed)
  * Moved changelog to stub Sphinx project for Releases plugin
  * Changed README to ReStructured Text (from Markdown)
- Dropped patch add_test_init.patch, no longer required.
- Added patch add-pytest-ini.patch:
  * Add the pytest.ini file that isn't included in the source distribution
    so the testsuite works.</changelog>
  <changelog author="code@bnavigator.de" date="1639396800">- Don't test on python310 because of pytest-relaxed not supporting
  Pytest 6 -- gh#bitprophet/pytest-relaxed#12</changelog>
  <changelog author="steven.kowalik@suse.com" date="1646913600">- pytest-relaxed now supports pytest 6, so test on all python versions.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="5d467d0b9c82ed06a627a05ad9e2b64f40d9e87b1d11d4a25cbaebceb0eebaeb" name="python311-marshmallow" arch="noarch">
  <version epoch="0" ver="3.20.2" rel="150400.9.7.1"/>
  <changelog author="tchvatal@suse.com" date="1564574400">- Add patch to fix building with pytest5 from upstream git:
  * pytest5.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1566820800">- Update to 3.0.1
  * Many changes, some of them breaking. For example:
  * Remove support for Python 2 (#1120). Only Python&gt;=3.5 is supported.
  * Allow input value to be included in error messages for a number of fields.
  * Change ordering of keys and values arguments to fields.Dict.
  * Please read upstream changelog.
- Drop upstreamed patches reproducible.patch and pytest5.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 3.0.3:
  * Handle when data_key is an empty string
  * Includes bug fix from 2.20.3
  * Fix incorrect super() call in SchemaMeta.__init__</changelog>
  <changelog author="mcalabkova@suse.com" date="1570536000">- Update to 3.2.1
  * Fix typing for Schema.dump[s]
  * Fix compatibility with Python &lt; 3.5.3
  * Fix bug that raised an uncaught error when a nested schema
    instance had an unpickleable object in its context
  * Fix propagating dot-delimited only and exclude parameters to
    nested schema instances
  * Few bug fixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1573646400">- Update to version 3.2.2:
  - Bug fixes:
  - Don't load fields for which ``load_only`` and ``dump_only`` are both ``True`` (:pr:`1448`).
  - Fix types in ``marshmallow.validate`` (:pr:`1446`).
  - Support:
  - Test against Python 3.8 (pr:`1431`).</changelog>
  <changelog author="pgajdos@suse.com" date="1585742400">- version update to 3.5.1
  - Includes bug fix from 2.21.0.
  - Fix list of nullable nested fields ``List(Nested(Field, allow_none=True)``
    (:issue:`1497`). Because this fix reverts an optimization introduced to
    speed-up serialization and deserialization of lists of nested fields, a
    negative impact on performance in this specific case is expected.
  - Improve type coverage (:issue:`1479`). Thanks :user:`Reskov`.
  - Fix typing for ``data`` param of ``Schema.load`` and ``ValidationError`` (:issue:`1492`).
    Thanks :user:`mehdigmira` for reporting and thanks :user:`dfirst` for the PR.
  - Remove unnecessary typecasts (:pr:`1500`). Thanks :user:`hukkinj1`.
  - Remove useless ``_serialize`` override in ``UUID`` field (:pr:`1489`).
  - ``fields.Nested`` may take a callable that returns a schema instance.
    Use this to resolve order-of-declaration issues when schemas nest each other (:issue:`1146`).
  - Passing the string ``"self"`` to ``fields.Nested`` is deprecated.
    Use a callable instead.
  - Fix typing for ``Number._format_num`` (:pr:`1466`). Thanks :user:`hukkinj1`.
  - Make mypy stricter and remove dead code (:pr:`1467`). Thanks again, :user:`hukkinj1`.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1598011200">- Update to 3.7.1:
  * Deprecations:
    + `marshmallow.pprint` is deprecated and will be removed in marshmallow 4 (:issue:`1588`).
  * Features:
    + Add ``validators.ContainsNoneOf`` (:issue:`1528`).
  * Bug fixes:
    + Fix typing in ``class_registry`` (:pr:`1574`). Thanks :user:`mahenzon`.
    + Fix passing ``only`` and ``exclude`` to ``Nested`` with an ordered ``Schema`` (:pr:`1627`).
    + ``fields.Boolean`` correctly serializes non-hashable types (:pr:`1633`).
- Refresh patch python-marshmallow-no-version-warning.patch</changelog>
  <changelog author="code@bnavigator.de" date="1619092800">- Update to 3.11.1
  * Fix treatment of dotted keys when unknown=INCLUDE (#1506).
    Thanks @rbu for reporting and thanks @sirosen for the fix
    (#1745).
- Release 3.11.0
  * Add fields.IPInterface, fields.IPv4Interface, and
    IPv6Interface (#1733). Thanks @madeinoz67 for the suggestion
    and the PR.
  * Raise AttributeError for missing methods when using fields.
    Method (#1675). Thanks @lassandroan.
  * Remove unnecessary hasattr and getattr checks in Field (#1770).
- Release 3.10.0
  * Passing field metadata via keyword arguments is deprecated and
    will be removed in marshmallow 4 (#1350). Use the explicit
    metadata=... argument instead. Thanks @sirosen.
- Release 3.9.1
  * Cast to mapping type in Mapping.serialize and Mapping.
    deserialize (#1685).
  * Fix bug letting Dict pass invalid dict on deserialization when
    no key or value Field is specified (#1685).
- Release 3.9.0
  * Add format argument to fields.Time and timeformat class Meta
    option (#686). Thanks @BennyAlex for the suggestion and thanks
    @infinityxxx for the PR.
  * Remove usage of implicit typing.Optional (#1663). Thanks
    @nadega for the PR.
- Release 3.8.0
  * Add fields.IP, fields.IPv4 and fields.IPv6 (#1485). Thanks
    @mgetka for the PR.
  * Fix typing in AwareDateTime (#1658). Thanks @adithyabsk for
    reporting.
- Use the python3 sphinx_build do build the docs
  gh#openSUSE/python-rpm-macros#109</changelog>
  <changelog author="simmphonie@opensuse.org" date="1653825600">- Update to 3.14.1 (2021-11-13)
  * Fix publishing type hints per PEP-561 (#1905). Thanks @bwindsor for the catch and patch.
- Release 3.14.0 (2021-10-17)
  * Fix fields.TimeDelta serialization precision (#1865). Thanks @yarsanich for reporting.
  * Fix type-hints for `data` arg in `Schema.validate` to accept list of
    dictionaries (#1790, #1868). Thanks @yourun-proger for PR.
  * Improve warning when passing metadata as keyword arguments (#1882).
    Thanks @traherom for the PR.
  * Don’t build universal wheels. We don’t support Python 2 anymore.
    (#1860) Thanks @YKdvd for reporting.
  * Make the build reproducible (#1862).
  * Drop support for Python 3.5 (#1863).
  * Test against Python 3.10 (#1888).
- Release 3.13.0 (2021-07-21)
  * Replace missing/default field parameters with load_default/dump_default (#1742).
    Thanks @sirosen for the PR.
  * The use of missing/default field parameters is deprecated and will be removed
  * in marshmallow 4. load_default/dump_default should be used instead.
- Release 3.12.2 (2021-07-06)
  * Don’t expose Fields as Schema attributes. This reverts a change
    introduced in 3.12.0 that causes issues when field names conflict
    with Schema attributes or methods. Fieldss are still accessible on a
    Schema instance through the fields attribute. (#1843)
- Release 3.12.1 (2021-05-10)
  * Fix bug that raised an AttributeError when instantiating a Schema with a
    field named parent (#1808). Thanks @flying-sheep for reporting and helping with the fix.
- Release 3.12.0 (2021-05-09)
  * Add validate.And (#1768). Thanks @rugleb for the suggestion.
  * Add type annotations to marshmallow.decorators (#1788, #1789). Thanks @michaeldimchuk for the PR.
  * Let Fields be accessed by name as Schema attributes (#1631).
  * Improve types in marshmallow.validate (#1786).
  * Make marshmallow.validate.Validator an abstract base class (#1786).
  * Remove unnecessary list cast (#1785).</changelog>
  <changelog author="yarunachalam@suse.com" date="1664452800">- Update to 3.17.1 (2022-08-22)
  Bug fixes:
  Add return type to fields.Email.__init__ (#2018). Thanks @kkirsche for the PR.
  Add missing type hint to IPInterface __init__ (#2036).
- Update to 3.17.0 (2022-06-26)
  Features:
  Support serialization as float in TimeDelta field (#1998). Thanks @marcosatti for the PR.
  Add messages_dict property to ValidationError to facilitate type checking (#1976). Thanks @sirosen for the PR.
- Update to 3.16.0 (2022-05-29)
  Features:
  Raise ValueError if an invalid value is passed to the unknown argument (#1721, #1732). Thanks @sirosen for the PR.
  Other changes:
  Set lower bound for packaging requirement (#1957). Thanks @MatthewNicolTR for reporting and thanks @sirosen for the PR.
  Improve warning messages by passing stacklevel (#1986). Thanks @tirkarthi for the PR.
- Update to 3.15.0 (2022-03-12)
  Features:
  Allow passing a dict to fields.Nested (#1935). Thanks @sirosen for the PR.
  Other changes:
  distutils deprecation warning in Python 3.10 (#1903). Thanks @kkirsche for the PR.
  Add py310 to black target-version (#1921).
  Drop support for Python 3.6 (#1923).</changelog>
  <changelog author="yarunachalam@suse.com" date="1666958400">- Update to 3.18.0 (2022-09-15)¶
  Features:
  Add Enum field (#2017) and (#2044).
  Bug fixes:
  Fix typing in Field._serialize signature (#2046).</changelog>
  <changelog author="yarunachalam@suse.com" date="1669982400">- Update to 3.19.0
  * Add timestamp and timestamp_ms formats to fields.DateTime (#612). Thanks @vgavro for    the suggestion and thanks @vanHoi for the PR.</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- We want "modern" Sphinx on SLE-15, not the 3.6-based one.</changelog>
  <changelog author="dmueller@suse.com" date="1678968000">- rename docs subpackage to the more common doc name</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Switch documentation to be within the main package on SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1702209600">- update to 3.20.1:
  * Fix call to ``get_declared_fields``: pass ``dict_cls`` again
  * Add ``absolute`` parameter to ``URL`` validator and ``Url``
  * Use Abstract Base Classes to define ``FieldABC`` and
    ``SchemaABC``
  * Use `OrderedSet` as default `set_class`. Schemas are now
    ordered by default.
  * Handle ``OSError`` and ``OverflowError`` in
    ``utils.from_timestamp`` (:pr:`2102`).
  * Fix the default inheritance of nested partial schemas
  * Officially support Python 3.11 (:pr:`2067`).
  * Drop support for Python 3.7 (:pr:`2135`).</changelog>
  <changelog author="dmueller@suse.com" date="1705406400">- update to 3.20.2:
  * Bug fixes: - Fix Nested field type hint for lambda Schema
    types (:pr:`2164`).
  * Other changes: - Officially support Python 3.12 (:pr:`2188`).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711454400">- Switch build system from setuptools to pyproject.toml
  + Add python-pip and python-wheel to BuildRequires
  + Replace %python_build with %pyproject_wheel
  + Replace %python_install with %pyproject_install
- Limit Python files matched in %files section</changelog>
</package>
<package pkgid="ce033c9484fcd79cfe835f9a71f7203caa8e08bd9d4b5be1f9fd1cdd3b2bfcd1" name="python311-multidict" arch="aarch64">
  <version epoch="0" ver="6.0.4" rel="150400.7.7.4"/>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 3.3.0:
  * Introduce abstract base classes (#102)
  * Publish OSX binary wheels (#153)</changelog>
  <changelog author="arun@gmx.de" date="1509710400">- specfile:
  * don't package .c files
- update to version 3.3.2:
  * Fix tarball (again)
- changes from version 3.3.1:
  * Include .c files in tarball (#181)</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  * update copyright year
  * CHANGES.rst -&gt; docs/changes.rst
- update to version 4.0.0:
  * Accept multiple keys in MultiDict.update() and
    CIMultiDict.update() (PR #199)</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 4.1.0:
  * Fix key casing in Pure Python implementation of CIMultiDict (PR
    [#202])</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.2.0:
  * Publish py.typed flag for type hinting analyzers (mypy etc).</changelog>
  <changelog author="tchvatal@suse.com" date="1523966401">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Update to 4.3.1:
  * No obvious changelog</changelog>
  <changelog author="hpj@urpla.net" date="1535976000">- don't depend on a certain python devel package, avoids:
    nothing provides python2-devel &gt;= 3.4.1
  such a version will never exist!</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes macro expansion</changelog>
  <changelog author="mcalabkova@suse.com" date="1559131200">- update to 4.5.2
  * Multidict views ported from Cython to C extension
  4.4.*
  * Restore Python 3.4 support
  * Rewrite C implementation to use C pair list.
  * Fix update order when both arg and kwargs are used.</changelog>
  <changelog author="tchvatal@suse.com" date="1583755200">- Update to 4.7.5:
  * various fixes for python 3.8 support</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix fdupes call</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- update to 4.7.6:
  * Fixed an issue with some versions of the ``wheel`` dist
    failing because of being unable to detect the license file.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update to v5.0.2
  * No runtime changes</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 5.1.0:
  - Support ``GenericAliases`` (``MultiDict[str]``) for Python 3.9+
  `#553 &lt;https://github.com/aio-libs/multidict/issues/553&gt;`_</changelog>
  <changelog author="adrian@suse.de" date="1645704000">- update to 6.0.2:
  - Use ``METH_FASTCALL`` where it makes sense.
    ``MultiDict.add()`` is 2.2 times faster now, ``CIMultiDict.add()`` is 1.5 times faster.
    The same boost is applied to ``get*()``, ``setdefault()``, and ``pop*()`` methods. (:issue:`681`)
  - Fixed type annotations for keys of multidict mapping classes. (:issue:`644`)
  - Support Multidict[int] for pure-python version.
    ``__class_getitem__`` is already provided by C Extension, making it work with the pure-extension too. (:issue:`678`)
  - Dropped Python 3.6 support (:issue:`680`)</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to 6.0.3:
  * Features
    Declared the official support for Python 3.11 — by @mlegner. (#872)</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.4:
  * Fixed a type annotations regression introduced in v6.0.2 under Python
    versions &lt;3.10. It was caused by importing certain types only available
    in newer versions. (:issue:`798`)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="05f64bcd8071c11ad2d0b9280421c622a960f8722fca479396759b9cfb807981" name="python311-multidict" arch="ppc64le">
  <version epoch="0" ver="6.0.4" rel="150400.7.7.4"/>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 3.3.0:
  * Introduce abstract base classes (#102)
  * Publish OSX binary wheels (#153)</changelog>
  <changelog author="arun@gmx.de" date="1509710400">- specfile:
  * don't package .c files
- update to version 3.3.2:
  * Fix tarball (again)
- changes from version 3.3.1:
  * Include .c files in tarball (#181)</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  * update copyright year
  * CHANGES.rst -&gt; docs/changes.rst
- update to version 4.0.0:
  * Accept multiple keys in MultiDict.update() and
    CIMultiDict.update() (PR #199)</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 4.1.0:
  * Fix key casing in Pure Python implementation of CIMultiDict (PR
    [#202])</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.2.0:
  * Publish py.typed flag for type hinting analyzers (mypy etc).</changelog>
  <changelog author="tchvatal@suse.com" date="1523966401">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Update to 4.3.1:
  * No obvious changelog</changelog>
  <changelog author="hpj@urpla.net" date="1535976000">- don't depend on a certain python devel package, avoids:
    nothing provides python2-devel &gt;= 3.4.1
  such a version will never exist!</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes macro expansion</changelog>
  <changelog author="mcalabkova@suse.com" date="1559131200">- update to 4.5.2
  * Multidict views ported from Cython to C extension
  4.4.*
  * Restore Python 3.4 support
  * Rewrite C implementation to use C pair list.
  * Fix update order when both arg and kwargs are used.</changelog>
  <changelog author="tchvatal@suse.com" date="1583755200">- Update to 4.7.5:
  * various fixes for python 3.8 support</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix fdupes call</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- update to 4.7.6:
  * Fixed an issue with some versions of the ``wheel`` dist
    failing because of being unable to detect the license file.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update to v5.0.2
  * No runtime changes</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 5.1.0:
  - Support ``GenericAliases`` (``MultiDict[str]``) for Python 3.9+
  `#553 &lt;https://github.com/aio-libs/multidict/issues/553&gt;`_</changelog>
  <changelog author="adrian@suse.de" date="1645704000">- update to 6.0.2:
  - Use ``METH_FASTCALL`` where it makes sense.
    ``MultiDict.add()`` is 2.2 times faster now, ``CIMultiDict.add()`` is 1.5 times faster.
    The same boost is applied to ``get*()``, ``setdefault()``, and ``pop*()`` methods. (:issue:`681`)
  - Fixed type annotations for keys of multidict mapping classes. (:issue:`644`)
  - Support Multidict[int] for pure-python version.
    ``__class_getitem__`` is already provided by C Extension, making it work with the pure-extension too. (:issue:`678`)
  - Dropped Python 3.6 support (:issue:`680`)</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to 6.0.3:
  * Features
    Declared the official support for Python 3.11 — by @mlegner. (#872)</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.4:
  * Fixed a type annotations regression introduced in v6.0.2 under Python
    versions &lt;3.10. It was caused by importing certain types only available
    in newer versions. (:issue:`798`)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="5a5610c0962ba873d17d44a08d1a56cbb5f4f1b3b8de352c8c81d554d0bdea1a" name="python311-multidict" arch="s390x">
  <version epoch="0" ver="6.0.4" rel="150400.7.7.4"/>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 3.3.0:
  * Introduce abstract base classes (#102)
  * Publish OSX binary wheels (#153)</changelog>
  <changelog author="arun@gmx.de" date="1509710400">- specfile:
  * don't package .c files
- update to version 3.3.2:
  * Fix tarball (again)
- changes from version 3.3.1:
  * Include .c files in tarball (#181)</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  * update copyright year
  * CHANGES.rst -&gt; docs/changes.rst
- update to version 4.0.0:
  * Accept multiple keys in MultiDict.update() and
    CIMultiDict.update() (PR #199)</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 4.1.0:
  * Fix key casing in Pure Python implementation of CIMultiDict (PR
    [#202])</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.2.0:
  * Publish py.typed flag for type hinting analyzers (mypy etc).</changelog>
  <changelog author="tchvatal@suse.com" date="1523966401">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Update to 4.3.1:
  * No obvious changelog</changelog>
  <changelog author="hpj@urpla.net" date="1535976000">- don't depend on a certain python devel package, avoids:
    nothing provides python2-devel &gt;= 3.4.1
  such a version will never exist!</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes macro expansion</changelog>
  <changelog author="mcalabkova@suse.com" date="1559131200">- update to 4.5.2
  * Multidict views ported from Cython to C extension
  4.4.*
  * Restore Python 3.4 support
  * Rewrite C implementation to use C pair list.
  * Fix update order when both arg and kwargs are used.</changelog>
  <changelog author="tchvatal@suse.com" date="1583755200">- Update to 4.7.5:
  * various fixes for python 3.8 support</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix fdupes call</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- update to 4.7.6:
  * Fixed an issue with some versions of the ``wheel`` dist
    failing because of being unable to detect the license file.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update to v5.0.2
  * No runtime changes</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 5.1.0:
  - Support ``GenericAliases`` (``MultiDict[str]``) for Python 3.9+
  `#553 &lt;https://github.com/aio-libs/multidict/issues/553&gt;`_</changelog>
  <changelog author="adrian@suse.de" date="1645704000">- update to 6.0.2:
  - Use ``METH_FASTCALL`` where it makes sense.
    ``MultiDict.add()`` is 2.2 times faster now, ``CIMultiDict.add()`` is 1.5 times faster.
    The same boost is applied to ``get*()``, ``setdefault()``, and ``pop*()`` methods. (:issue:`681`)
  - Fixed type annotations for keys of multidict mapping classes. (:issue:`644`)
  - Support Multidict[int] for pure-python version.
    ``__class_getitem__`` is already provided by C Extension, making it work with the pure-extension too. (:issue:`678`)
  - Dropped Python 3.6 support (:issue:`680`)</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to 6.0.3:
  * Features
    Declared the official support for Python 3.11 — by @mlegner. (#872)</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.4:
  * Fixed a type annotations regression introduced in v6.0.2 under Python
    versions &lt;3.10. It was caused by importing certain types only available
    in newer versions. (:issue:`798`)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="1da1b2976369ae6f5d3d0a3b6cffcaf3514c292b1d016bfcd8ced813b8b7fd9d" name="python311-multidict" arch="x86_64">
  <version epoch="0" ver="6.0.4" rel="150400.7.7.4"/>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 3.3.0:
  * Introduce abstract base classes (#102)
  * Publish OSX binary wheels (#153)</changelog>
  <changelog author="arun@gmx.de" date="1509710400">- specfile:
  * don't package .c files
- update to version 3.3.2:
  * Fix tarball (again)
- changes from version 3.3.1:
  * Include .c files in tarball (#181)</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  * update copyright year
  * CHANGES.rst -&gt; docs/changes.rst
- update to version 4.0.0:
  * Accept multiple keys in MultiDict.update() and
    CIMultiDict.update() (PR #199)</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 4.1.0:
  * Fix key casing in Pure Python implementation of CIMultiDict (PR
    [#202])</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.2.0:
  * Publish py.typed flag for type hinting analyzers (mypy etc).</changelog>
  <changelog author="tchvatal@suse.com" date="1523966401">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Update to 4.3.1:
  * No obvious changelog</changelog>
  <changelog author="hpj@urpla.net" date="1535976000">- don't depend on a certain python devel package, avoids:
    nothing provides python2-devel &gt;= 3.4.1
  such a version will never exist!</changelog>
  <changelog author="tchvatal@suse.com" date="1551960000">- Fix fdupes macro expansion</changelog>
  <changelog author="mcalabkova@suse.com" date="1559131200">- update to 4.5.2
  * Multidict views ported from Cython to C extension
  4.4.*
  * Restore Python 3.4 support
  * Rewrite C implementation to use C pair list.
  * Fix update order when both arg and kwargs are used.</changelog>
  <changelog author="tchvatal@suse.com" date="1583755200">- Update to 4.7.5:
  * various fixes for python 3.8 support</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix fdupes call</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- update to 4.7.6:
  * Fixed an issue with some versions of the ``wheel`` dist
    failing because of being unable to detect the license file.</changelog>
  <changelog author="jayvdb@gmail.com" date="1605960000">- Update to v5.0.2
  * No runtime changes</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 5.1.0:
  - Support ``GenericAliases`` (``MultiDict[str]``) for Python 3.9+
  `#553 &lt;https://github.com/aio-libs/multidict/issues/553&gt;`_</changelog>
  <changelog author="adrian@suse.de" date="1645704000">- update to 6.0.2:
  - Use ``METH_FASTCALL`` where it makes sense.
    ``MultiDict.add()`` is 2.2 times faster now, ``CIMultiDict.add()`` is 1.5 times faster.
    The same boost is applied to ``get*()``, ``setdefault()``, and ``pop*()`` methods. (:issue:`681`)
  - Fixed type annotations for keys of multidict mapping classes. (:issue:`644`)
  - Support Multidict[int] for pure-python version.
    ``__class_getitem__`` is already provided by C Extension, making it work with the pure-extension too. (:issue:`678`)
  - Dropped Python 3.6 support (:issue:`680`)</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to 6.0.3:
  * Features
    Declared the official support for Python 3.11 — by @mlegner. (#872)</changelog>
  <changelog author="dmueller@suse.com" date="1672660800">- update to 6.0.4:
  * Fixed a type annotations regression introduced in v6.0.2 under Python
    versions &lt;3.10. It was caused by importing certain types only available
    in newer versions. (:issue:`798`)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="b73d7b232deac84178c234b6063810386a822e8eb22a8b01cbfb2460f284876f" name="python311-oauthlib" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="150400.12.7.4"/>
  <changelog author="arun@gmx.de" date="1506340800">- update to version 2.0.4:
  * Fixed typo that caused OAuthlib to crash because of the fix in
    "Address missing OIDC errors and fix a typo in the
    AccountSelectionRequired exception".
- changes from version 2.0.3:
  * Address missing OIDC errors and fix a typo in the
    AccountSelectionRequired exception.
  * Update proxy keys on CaseInsensitiveDict.update().
  * Redirect errors according to OIDC's response_mode.
  * Added universal wheel support.
  * Added log statements to except clauses.
  * According to RC7009 Section 2.1, a client should include
    authentication credentials when revoking its tokens. As discussed
    in #339, this is not make sense for public clients. However, in
    that case, the public client should still be checked that is
    infact a public client (authenticate_client_id).
  * Improved prompt parameter validation.
  * Added two error codes from RFC 6750.
  * Hybrid response types are now be fragment-encoded.
  * Added Python 3.6 to Travis CI testing and trove classifiers.
  * Fixed BytesWarning issued when using a string placeholder for
    bytes object.
  * Documented PyJWT dependency and improved logging and exception
    messages.
  * Documentation improvements and fixes.</changelog>
  <changelog author="arun@gmx.de" date="1508500800">- update to version 2.0.5:
  * Fix OAuth2Error.response_mode for #463.
  * Documentation improvement.</changelog>
  <changelog author="arun@gmx.de" date="1508587200">- update to version 2.0.6:
  * 2.0.5 contains breaking changes.</changelog>
  <changelog author="arun@gmx.de" date="1521892800">- specfile:
  * update copyright year
  * updated url
- update to version 2.0.7:
  * Moved oauthlib into new organization on GitHub.
  * Include license file in the generated wheel package. (#494)
  * When deploying a release to PyPI, include the wheel
    distribution. (#496)
  * Check access token in self.token dict. (#500)
  * Added bottle-oauthlib to docs. (#509)
  * Update repository location in Travis. (#514)
  * Updated docs for organization change. (#515)
  * Replace G+ with Gitter. (#517)
  * Update requirements. (#518)
  * Add shields for Python versions, license and RTD. (#520)
  * Fix ReadTheDocs build (#521).
  * Fixed "make" command to test upstream with local oauthlib. (#522)
  * Replace IRC notification with Gitter Hook. (#523)
  * Added Github Releases deploy provider. (#523)</changelog>
  <changelog author="arun@gmx.de" date="1522065600">- specfile:
  * ran spec-cleaner</changelog>
  <changelog author="arun@gmx.de" date="1527076800">- specfile:
  * fix fdupes call for single-spec
- update to version 2.1.0:
  * Fixed some copy and paste typos (#535)
  * Use secrets module in Python 3.6 and later (#533)
  * Add request argument to confirm_redirect_uri (#504)
  * Avoid populating spurious token credentials (#542)
  * Make populate attributes API public (#546)</changelog>
  <changelog author="mcepl@suse.com" date="1534161600">Remove dependency on unittest2
    Add remove_unittest2.patch to facilitate that</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Update to version 3.0.1
  * Fixed regression introduced in 3.0.0
    + Fixed Revocation &amp; Introspection Endpoints when using Client
    Authentication with HTTP Basic Auth.
- from 3.0.0
  * General fixes:
    + Add support of python3.7
    + $ and ' are allowed to be unencoded in query strings
    + Request attributes are no longer overriden by HTTP Headers
    + Removed unnecessary code for handling python2.6
    + Several minors updates to setup.py and tox
    + Set pytest as the default unittest framework
  * OAuth2.0 Provider - outstanding Features
    + OpenID Connect Core support
    + RFC7662 Introspect support
    + RFC8414 OAuth2.0 Authorization Server Metadata support
    + RFC7636 PKCE support
  * OAuth2.0 Provider - API/Breaking Changes
    + Add "request" to confirm_redirect_uri
    + confirm_redirect_uri/get_default_redirect_uri has a bit changed
    + invalid_client is now a FatalError
    + Changed errors status code from 401 to 400:
  - invalid_grant:
  - invalid_scope:
  - access_denied/unauthorized_client/consent_required/login_required
  - 401 must have WWW-Authenticate HTTP Header set.
  * OAuth2.0 Provider - Bugfixes
    + empty scopes no longer raise exceptions for implicit and authorization_code
  * OAuth2.0 Client - Bugfixes / Changes:
    + expires_in in Implicit flow is now an integer
    + expires is no longer overriding expires_in
    + parse_request_uri_response is now required
    + Unknown error=xxx raised by OAuth2 providers was not understood
    + OAuth2's `prepare_token_request` supports sending an empty string for `client_id`
    + OAuth2's `WebApplicationClient.prepare_request_body` was refactored to better
    support sending or omitting the `client_id` via a new `include_client_id` kwarg.
    By default this is included. The method will also emit a DeprecationWarning if
    a `client_id` parameter is submitted; the already configured `self.client_id`
    is the preferred option.
  * OAuth1.0 Client:
    + Support for HMAC-SHA256
- Removed remove_unittest2.patch made redundant by v3.0.1
- Set minumum version of python-PyJWT &gt;= 1.0.0</changelog>
  <changelog author="arun@gmx.de" date="1563710400">- specfile:
  * be more specific in %files section
- update to version 3.0.2:
  * #650: Fixed space encoding in base string URI used in the
    signature base string.
  * #652: Fixed OIDC /token response which wrongly returned
    "&amp;state=None"
  * #654: Doc: The value state must not be stored by the AS, only
    returned in /authorize response.
  * #656: Fixed OIDC "nonce" checks: raise errors when it's mandatory</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 3.1.0:
  * OAuth2.0 Provider - Features * #660: OIDC add support of nonce, c_hash, at_hash fields
  * #677: OIDC add UserInfo endpoint - New RequestValidator.get_userinfo_claims method
  * #666: Disabling query parameters for POST requests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588161600">- Add patch to switch from external mock to unittest.mock
  + o_switch_to_unitest_mock.patch</changelog>
  <changelog author="hpj@urpla.net" date="1600948800">- Fix patch numbering</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 3.1.1:
  * #753: Fix acceptance of valid IPv6 addresses in URI validation
  * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently
    relies on the `scope` provided in the constructor if any, except if overridden temporarily
    in a method call. Note that in particular providing a non-None `scope` in
    `prepare_authorization_request` or `prepare_refresh_token` does not override anymore
    `self.scope` forever, it is just used temporarily.
  * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response,
    ServiceApplicationClient.prepare_request_body,
    and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in
    constructor.
  * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor
  * #711: client_credentials grant: fix log message
  * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token
  * #756: Different prompt values are now handled according to spec (e.g. prompt=none)
  * #759: OpenID Connect - fix Authorization: Basic parsing
  * #716: improved skeleton validator for public vs private client
  * #720: replace mock library with standard unittest.mock
  * #727: build isort integration
  * #734: python2 code removal
  * #735, #750: add python3.8 support
  * #749: bump minimum versions of pyjwt and cryptography
- drop o_switch_to_unitest_mock.patch (upstream)</changelog>
  <changelog author="arun@gmx.de" date="1643889600">- specfile:
  * update copyright year
- update to version 3.2.0:
  * OAuth2.0 Client: * #795: Add Device Authorization Flow for Web
    Application * #786: Add PKCE support for Client * #783: Fallback
    to none in case of wrong expires_at format.
  * OAuth2.0 Provider: * #790: Add support for CORS to metadata
    endpoint. * #791: Add support for CORS to token endpoint. * #787:
    Remove comma after Bearer in WWW-Authenticate
  * OAuth2.0 Provider - OIDC:
    + #755: Call save_token in Hybrid code flow
    + #751: OIDC add support of refreshing ID Tokens with
    refresh_id_token
    + #751: The RefreshTokenGrant modifiers now take the same
    arguments as the AuthorizationCodeGrant modifiers (token,
    token_handler, request).
  * General:
    + Added Python 3.9, 3.10, 3.11
    + Improve Travis &amp; Coverage</changelog>
  <changelog author="arun@gmx.de" date="1662984000">- specfile:
  * update requirements
- update to version 3.2.1:
  * OAuth2.0 Provider: * #803: Metadata endpoint support of non-HTTPS
  * CVE-2022-36087, bugzilla # 1203333
  * OAuth1.0: * #818: Allow IPv6 being parsed by signature
  * General: * Improved and fixed documentation warnings. * Cosmetic
    changes based on isort</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 3.2.2:
  * OAuth2.0 Provider: * CVE-2022-36087
- Also remove the conditional definition of python_module.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="72689498cddaa01030c3c2556efb1b5d47397eb26afe74f7aa3206676cf96846" name="python311-opentelemetry-api" arch="noarch">
  <version epoch="0" ver="1.23.0" rel="150400.10.7.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1582372800">- Initial build
  + Version 0.4a0</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Update to 0.4a1:
  * various minor tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1585310400">- version update to 0.5b0
  * W3C Correlation Context Propagation
  * OpenTelemetry Collector Exporter Integration for both metrics and traces
  * Metrics SDK
  * Global configuration module</changelog>
  <changelog author="pgajdos@suse.com" date="1586952000">- version update to 0.6b0
  * Add support for lazy events and links (#474)
  * Metrics API no longer uses LabelSet (#527)
  * Adding is_remote flag to SpanContext, indicating when a span is remote (#516)
  * Allow digit as first char in vendor specific trace state key (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1611316800">- Version update to 0.17b0
  + Added
  - Add support for OTLP v0.6.0 (#1472)
  - Add protobuf via gRPC exporting support for Jaeger (#1471)
  - Add support for Python 3.9 (#1441)
  - Added the ability to disable instrumenting libraries specified by
    OTEL_PYTHON_DISABLED_INSTRUMENTATIONS env variable, when using
    opentelemetry-instrument command. (#1461)
  - Add `fields` to propagators (#1374)
  - Add local/remote samplers to parent based sampler (#1440)
  - Add support for OTEL_SPAN_{ATTRIBUTE_COUNT_LIMIT,EVENT_COUNT_LIMIT,LINK_COUNT_LIMIT}
    (#1377)
  - Return `None` for `DictGetter` if key not found (#1449)
  - Added support for Jaeger propagator (#1219)
  - Remove dependency on SDK from `opentelemetry-instrumentation` package. The
    `opentelemetry-sdk` package now registers an entrypoint `opentelemetry_configurator`
    to allow `opentelemetry-instrument` to load the configuration for the SDK (#1420)
  - `opentelemetry-exporter-zipkin` Add support for array attributes in Span and
    Resource exports (#1285)
  - Added `__repr__` for `DefaultSpan`, added `trace_flags` to `__repr__` of
    `SpanContext` (#1485)
  - `opentelemetry-sdk` Add support for OTEL_TRACE_SAMPLER and OTEL_TRACE_SAMPLER_ARG
    env variables (#1496)
  - Adding `opentelemetry-distro` package to add default configuration for
    span exporter to OTLP (#1482)
  + Changed
  - `opentelemetry-exporter-zipkin` Updated zipkin exporter status code and error tag
    (#1486)
  - Recreate span on every run of a `start_as_current_span`-decorated function (#1451)
  - `opentelemetry-exporter-otlp` Headers are now passed in as tuple as metadata, instead of a
    string, which was incorrect. (#1507)
  - `opentelemetry-exporter-jaeger` Updated Jaeger exporter status code tag (#1488)
  - `opentelemetry-api` `opentelemety-sdk` Moved `idsgenerator` into sdk (#1514)
  - `opentelemetry-sdk` The B3Format propagator has been moved into its own package:
    `opentelemetry-propagator-b3` (#1513)
  - Update default port for OTLP exporter from 55680 to 4317 (#1516)
  - `opentelemetry-exporter-zipkin` Update boolean attribute value transformation (#1509)
  - Move opentelemetry-opentracing-shim out of instrumentation folder (#1533)
  - `opentelemetry-sdk` The JaegerPropagator has been moved into its own package:
    `opentelemetry-propagator-jaeger` (#1525)
  - `opentelemetry-exporter-jaeger`, `opentelemetry-exporter-zipkin` Update
    InstrumentationInfo tag keys for Jaeger and Zipkin exporters (#1535)
  - `opentelemetry-sdk` Remove rate property setter from TraceIdRatioBasedSampler (#1536)
  - Fix TraceState to adhere to specs (#1502)
  + Removed
  - `opentelemetry-api` Remove ThreadLocalRuntimeContext since python3.4 is not supported.
- from version 0.16b1
  + Added
  - Add meter reference to observers (#1425)
- from version 0.16b0
  + Added
  - Add optional parameter to `record_exception` method (#1314)
  - Add pickle support to SpanContext class (#1380)
  - Add instrumentation library name and version to OTLP exported metrics (#1418)
  - Add Gzip compression for exporter (#1141)
  - Support for v2 api protobuf format (#1318)
  - Add IDs Generator as Configurable Property of Auto Instrumentation (#1404)
  - Added support for `OTEL_EXPORTER` to the `opentelemetry-instrument` command
    (#1036)
  + Changed
  - Change temporality for Counter and UpDownCounter (#1384)
  - OTLP exporter: Handle error case when no credentials supplied (#1366)
  - Update protobuf versions (#1356)
  - Add missing references to instrumented packages (#1416)
  - Instrumentation Package depends on the OTel SDK (#1405)
  - Allow samplers to modify tracestate (#1319)
  - Update exception handling optional parameters, add escaped attribute to record_exception
    (#1365)
  - Rename `MetricRecord` to `ExportRecord` (#1367)
  - Rename `Record` to `Accumulation` (#1373)
  - Rename `Meter` to `Accumulator (#1372)
  - Fix `ParentBased` sampler for implicit parent spans. Fix also `trace_state`
    erasure for dropped spans or spans sampled by the `TraceIdRatioBased` sampler.
    (#1394)
- See upstream CHANGELOG.md for the changes from 0.7b1 to 0.15b0
  + https://raw.githubusercontent.com/open-telemetry/opentelemetry-python/master/CHANGELOG.md
- Drop tests.tar.bz2 tarball as tests are included in the upstream source now</changelog>
  <changelog author="code@bnavigator.de" date="1611316801">- aiocontextvars is only needed for older Python 3.6. Python 3.7
  and beyond provide everything in stdlib contextvars. See
  upstreams' setup.cfg.  Use rpm boolean dependencies to pull in
  aiocontextvars only for python36 if available (TW) or python3 if
  python3-base &lt; 3.7 (Leap)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620388800">- Version update to 1.1.0
  + Added
  - Added py.typed file to every package. This should resolve a bunch of mypy
    errors for users. (#1720)
  - Add auto generated trace and resource attributes semantic conventions (#1759)
  - Added SpanKind to should_sample parameters, suggest using parent span
    context's tracestate instead of manually passed in tracestate in
    should_sample (#1764)
  - Added experimental HTTP back propagators. (#1762)
  - Adjust B3Format propagator to be spec compliant by not modifying context
    when propagation headers are not present/invalid/empty (#1728)
  - Silence unnecessary warning when creating a new Status object without description. (#1721)
  - Update bootstrap cmd to use exact version when installing instrumentation packages. (#1722)
  - Fix B3 propagator to never return None. (#1750)
  - Added ProxyTracerProvider and ProxyTracer implementations to allow fetching provider
    and tracer instances before a global provider is set up. (#1726)
  - Added __contains__ to opentelementry.trace.span.TraceState. (#1773)
    opentelemetry-opentracing-shim Fix an issue in the shim where a Span was being wrapped
    in a NonRecordingSpan when it wasn't necessary. (#1776)
  - OTLP Exporter now uses the scheme in the endpoint to determine whether to establish
    a secure connection or not. (#1771)
- from version 1.10a0
  + This release adds the experimental metrics API/SDK and will include the following packages:
  - opentelemetry-exporter-prometheus
  - opentelemetry-api
  - opentelemetry-sdk
  - opentelemetry-exporter-otlp-proto-grpc
  - opentelemetry-exporter-otlp
- from version 1.0.0
  + NOTE: As part of this release, all old versions have been removed for packages
    prefixed with opentelemetry-ext-
  + Added
  - Document how to work with fork process web server models(Gunicorn, uWSGI etc...)
    (#1609)
  - Add max_attr_value_length support to Jaeger exporter (#1633)
  - Moved use_span from Tracer to opentelemetry.trace.use_span. (#1668)
  - opentelemetry.trace.use_span() will now overwrite previously set status on span
    in case an exception is raised inside the context manager and set_status_on_exception
    is set to True. (#1668)
  - Add udp_split_oversized_batches support to jaeger exporter (#1500)
  + Changed
  - remove service_name from constructor of jaeger and opencensus exporters and
    use of env variable OTEL_PYTHON_SERVICE_NAME ([#1669])(#1669)
  - Rename IdsGenerator to IdGenerator (#1651)
  - Make TracerProvider's resource attribute private (#1652)
  - Rename Resource's create_empty to get_empty (#1653)
  - Renamed BatchExportSpanProcessor to BatchSpanProcessor and SimpleExportSpanProcessor
    to SimpleSpanProcessor (#1656)
  - Rename DefaultSpan to NonRecordingSpan (#1661)
  - Fixed distro configuration with OTEL_TRACES_EXPORTER env var set to otlp (#1657)
  - Moving Getter, Setter and TextMapPropagator out of opentelemetry.trace.propagation
    and into opentelemetry.propagators (#1662)
  - Rename BaggagePropagator to W3CBaggagePropagator (#1663)
  - Rename JaegerSpanExporter to JaegerExporter and rename ZipkinSpanExporter to
    ZipkinExporter (#1664)
  - Expose StatusCode from the opentelemetry.trace module (#1681)
  - Status now only sets description when status_code is set to StatusCode.ERROR (#1673)
  - Update OTLP exporter to use OTLP proto 0.7.0 (#1674)
  - Remove time_ns from API and add a warning for older versions of Python (#1602)
  - Hide implementation classes/variables in api/sdk (#1684)
  - Cleanup OTLP exporter compression options, add tests (#1671)
  - Initial documentation for environment variables (#1680)
  - Change Zipkin exporter to obtain service.name from span (#1696)
  - Split up opentelemetry-exporter-jaeger package into opentelemetry-exporter-jaeger-proto-grpc
    and opentelemetry-exporter-jaeger-thrift packages to reduce dependencies for each one. (#1694)
  - Added opentelemetry-exporter-otlp-proto-grpc and changed opentelemetry-exporter-otlp to
    install it as a dependency. This will allow for the next package/protocol to also be in
    its own package. (#1695)
  - Change Jaeger exporters to obtain service.name from span (#1703)
  - Fixed an unset OTEL_TRACES_EXPORTER resulting in an error (#1707)
  - Split Zipkin exporter into opentelemetry-exporter-zipkin-json and opentelemetry-exporter-zipkin-
    proto-http packages to reduce dependencies. The opentelemetry-exporter-zipkin installs both. (#1699)
  - Make setters and getters optional (#1690)
  + Removed
  - Removed unused get_hexadecimal_trace_id and get_hexadecimal_span_id methods. (#1675)
  - Remove OTEL_EXPORTER_*_ INSECURE env var (#1682)
  - Removing support for Python 3.5 (#1706)
- from version 0.19b0
  + Changed
  - remove service_name from constructor of jaeger and opencensus exporters and
    use of env variable OTEL_PYTHON_SERVICE_NAME ([#1669])(#1669)
  - Rename IdsGenerator to IdGenerator (#1651)
  + Removed
  - Removing support for Python 3.5 (#1706)
- from version 0.18b0
  + Release only affects Opentelemetry components listed below:
  - opentelemetry-distro
  - opentelemetry-exporter-opencensus
  - opentelemetry-instrumentation
  - opentelemetry-opentracing-shim
  + Added
  - Add urllib to opentelemetry-bootstrap target list ([#1584])(#1584)
- from version 1.0.0rc1
  + Release only affects core Opentelemetry components listed below:
  - opentelemetry-api
  - opentelemetry-sdk
  - opentelemetry-exporter-otlp
  - opentelemetry-exporter-jaeger
  - opentelemetry-exporter-zipkin
  - opentelemetry-proto
  - opentelemetry-propagator-b3
  - opentelemetry-propagator-jaeger
  + Changed
  - Tracer and Meter provider environment variables are now consistent with the rest (#1571])
  - Rename TRACE_ to TRACES_ for environment variables (#1595])
  - Read-only Span attributes have been moved to ReadableSpan class (#1560)
  + Added
  - Added end_on_exit argument to start_as_current_span (#1519])
  - Add Span.set_attributes method to set multiple values with one call (#1520)
  - Make sure Resources follow semantic conventions (#1480)
  - Allow missing carrier headers to continue without raising AttributeError (#1545)
  + Removed
  - Remove Configuration (#1523)
  - Remove Metrics as part of stable, marked as experimental (#1568)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1636027200">- Version update to 1.5.0
  - Add pre and post instrumentation entry points (#1983)
  - Fix documentation on well known exporters and variable OTEL_TRACES_EXPORTER
    which were misnamed (#2023)
  - `opentelemetry-sdk` `get_aggregated_resource()` returns default resource and
    service name whenever called (#2013)
  - `opentelemetry-distro` &amp; `opentelemetry-sdk` Moved Auto Instrumentation Configurator
    code to SDK to let distros use its default implementation (#1937)
  - Add Trace ID validation to meet TraceID spec (#1992)
  - Fixed Python 3.10 incompatibility in `opentelemetry-opentracing-shim` tests (#2018)
  - `opentelemetry-sdk` added support for `OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT` (#2044)
  - `opentelemetry-sdk` Fixed bugs (#2041, #2042 &amp; #2045) in Span Limits (#2044)
  - `opentelemetry-sdk` Add support for `OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT` env var (#2056)
  - `opentelemetry-sdk` Treat limit even vars set to empty values as unset/unlimited. (#2054)
  - `opentelemetry-api` Attribute keys must be non-empty strings. (#2057)
- from version 1.4.0
  + Added
  - Moved `opentelemetry-instrumentation` to core repository. (#1959)
  - Add support for OTLP Exporter Protobuf over HTTP (#1868)
  - Dropped attributes/events/links count available exposed on ReadableSpans. (#1893)
  - Added dropped count to otlp, jaeger and zipkin exporters. (#1893)
  - Give OTLPHandler the ability to process attributes (#1952)
  - Add global LogEmitterProvider and convenience function get_log_emitter (#1901)
  - Add OTLPHandler for standard library logging module (#1903)
  + Changed
  - Updated `opentelemetry-opencensus-exporter` to use `service_name` of spans
    instead of resource (#1897)
  - Added descriptions to the env variables mentioned in the opentelemetry-specification
    (#1898)
  - Ignore calls to `Span.set_status` with `StatusCode.UNSET` and also if previous
    status already had `StatusCode.OK`. (#1902)
  - Attributes for `Link` and `Resource` are immutable as they are for `Event`, which
    means any attempt to modify attributes directly will result in a `TypeError` exception.
    (#1909)
  - Added `BoundedAttributes` to the API to make it available for `Link` which is defined
    in the API. Marked `BoundedDict` in the SDK as deprecated as a result. (#1915)
  - Fix OTLP SpanExporter to distinguish spans based off Resource and InstrumentationInfo
    (#1927)
  - Updating dependency for opentelemetry api/sdk packages to support major version
    instead of pinning to specific versions. (#1933)
  - `opentelemetry-semantic-conventions` Generate semconv constants update for OTel
    Spec 1.5.0 (#1946)
  + Fixed
  - Updated `opentelementry-opentracing-shim` `ScopeShim` to report exceptions in
    opentelemetry specification format, rather than opentracing spec format. (#1878)
- from version 1.3.0
  + Added
  - Allow span limits to be set programatically via TracerProvider. (#1877)
  - Added support for CreateKey functionality. (#1853)
  + Changed
  - Updated get_tracer to return an empty string when passed an invalid name (#1854)
  - Changed AttributeValue sequences to warn mypy users on adding None values to array
    (#1855)
  - Fixed exporter OTLP header parsing to match baggage header formatting. (#1869)
  - Added optional `schema_url` field to `Resource` class (#1871)
  - Update protos to latest version release 0.9.0 (#1873)
- from version 1.2.0
  + Added
  - Added example for running Django with auto instrumentation. (#1803)
  - Added `B3SingleFormat` and `B3MultiFormat` propagators to the
    `opentelemetry-propagator-b3` package. (#1823)
  - Added support for OTEL_SERVICE_NAME. (#1829)
  - Lazily read/configure limits and allow limits to be unset. (#1839)
  - Added support for OTEL_EXPORTER_JAEGER_TIMEOUT (#1863)
  + Changed
  - Fixed OTLP gRPC exporter silently failing if scheme is not specified
    in endpoint. (#1806)
  - Rename CompositeHTTPPropagator to CompositePropagator as per specification.
    (#1807)
  - Propagators use the root context as default for `extract` and do not modify
    the context if extracting from carrier does not work. (#1811)
  - Fixed `b3` propagator entrypoint to point to `B3SingleFormat` propagator.
    (#1823)
  - Added `b3multi` propagator entrypoint to point to `B3MultiFormat` propagator.
    (#1823)
  - Improve warning when failing to decode byte attribute (#1810)
  - Fixed inconsistency in parent_id formatting from the ConsoleSpanExporter
    (#1833)
  - Include span parent in Jaeger gRPC export as `CHILD_OF` reference (#1809)
  - Fixed sequence values in OTLP exporter not translating (#1818)
  - Update transient errors retry timeout and retryable status codes (#1842)
  - Apply validation of attributes to `Resource`, move attribute related logic
    to separate package. (#1834)
  - Fix start span behavior when excess links and attributes are included (#1856)
  +  Removed
  - Moved `opentelemetry-instrumentation` to contrib repository. (#1797)</changelog>
  <changelog author="code@bnavigator.de" date="1642334400">- Remove obsolete but unresolvable python36 requirement</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683806400">- Ignore some tests because there's no opentelemetry-test-util module
  gh#open-telemetry/opentelemetry-python#2263
- Update to 1.17.0:
  * Implement LowMemory temporality (#3223)
  * PeriodicExportingMetricReader will continue if collection times out (#3100)
  * Fix formatting of ConsoleMetricExporter. (#3197)
  * Fix use of built-in samplers in SDK configuration (#3176)
  * Implement shutdown procedure forOTLP grpc exporters (#3138)
  * Add exponential histogram (#2964)
  * Add OpenCensus trace bridge/shim (#3210)
  * A lot more changes in previous releases can be found at
  https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md#version-1170038b0-2023-03-22</changelog>
  <changelog author="dmueller@suse.com" date="1702209600">- update to 1.21.0:
  * Fix `SumAggregation` ￼  (#3390)
  * Fix handling of empty metric collection cycles (#3335)
  * Fix error when no LoggerProvider configured for
    LoggingHandler (#3423)
  * Make `opentelemetry_metrics_exporter` entrypoint support pull
    exporters (#3428)
  * Allow instrument names to have '/' and up to 255 characters
    (#3442)
  * Do not load Resource on sdk import (#3447)
  * Update semantic conventions to version 1.21.0 (#3251)
  * Add missing schema_url in global api for logging and metrics
    (#3251)
  * Prometheus exporter support for auto instrumentation  (#3413)
  * Modify Prometheus exporter to translate non-monotonic Sums
    into Gauges (#3306)
  * Update the body type in the log ($3343)
  * Add max_scale option to Exponential Bucket Histogram
    Aggregation  (#3323)
  * Use BoundedAttributes instead of raw dict to extract
    attributes from LogRecord (#3310)
  * Support dropped_attributes_count in LogRecord and exporters
    (#3351)
  * Add unit to view instrument selection criteria (#3341)
  * Upgrade opentelemetry-proto to 0.20 and regen #3355)
  * Include endpoint in Grpc transient error warning #3362)
  * Fixed bug where logging export is tracked as trace #3375)
  * Select histogram aggregation with an environment variable
  * Move Protobuf encoding to its own package (#3169)
  * Add experimental feature to detect resource detectors in auto
    instrumentation (#3181)
  * Fix exporting of ExponentialBucketHistogramAggregation from
    opentelemetry.sdk.metrics.view (#3240)
  * Fix headers types mismatch for OTLP Exporters (#3226)
  * Fix suppress instrumentation for log batch processor (#3223)
  * Add speced out environment variables and arguments for
    BatchLogRecordProcessor (#3237)</changelog>
  <changelog author="dmueller@suse.com" date="1703678400">- update to 1.22.0:
  * Prometheus exporter sanitize info metric (#3572)
  * Remove Jaeger exporters (#3554)
  * Log stacktrace on `UNKNOWN` status OTLP export error  (#3536)
  * Fix OTLPExporterMixin shutdown timeout period (#3524)
  * Handle `taskName` `logrecord` attribute (#3557)</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1711195200">- update to 1.23.0:
  * Use Attribute rather than boundattribute in logrecord (#3567)
  * Fix flush error when no LoggerProvider configured for LoggingHandler (#3608)
  * Fix OTLPMetricExporter ignores preferred_aggregation property (#3603)
  * Logs: set observed_timestamp field (#3565)
  * Add missing Resource SchemaURL in OTLP exporters (#3652)
  * Fix loglevel warning text (#3566)
  * Prometheus Exporter string representation for target_info labels (#3659)
  * Logs: ObservedTimestamp field is missing in console exporter output (#3564)
  * Fix explicit bucket histogram aggregation (#3429)
  * Add code.lineno, code.function and code.filepath to all logs (#3645)
  * Add Synchronous Gauge instrument (#3462)
  * Drop support for 3.7 (#3668)
  * Include key in attribute sequence warning (#3639)
  * Upgrade markupsafe, Flask and related dependencies to dev and test
    environments (#3609)
  * Handle HTTP 2XX responses as successful in OTLP exporters (#3623)
  * Improve Resource Detector timeout messaging (#3645)
  * Add Proxy classes for logging (#3575)
  * Remove dependency on 'backoff' library (#3679)</changelog>
</package>
<package pkgid="e781f716439028cf14754e0e754458988e5313ec5b50fd49a8ed326d7a6facea" name="python311-paramiko" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="150400.13.10.4"/>
  <changelog author="mimi.vx@gmail.com" date="1550145600">- drop python-pytest_relaxed dependency
- add patches:
  1311.patch - fix warnings
  1379.patch - fix support for gssapi
  relaxed.patch - remove unnecessary pytest_relaxed dep
- remove patch:
  disable-gssapi.patch - supersseded</changelog>
  <changelog author="hpj@urpla.net" date="1550145601">- add empty line after %autopatch: build fails up to 42.3 otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1552478400">- Run tests verbosely
- Drop cert_support.tar.gz as it is currently properly in the release</changelog>
  <changelog author="mimi.vx@gmail.com" date="1560254400">- update to 2.5.0
- dropped 1379.patch
- refreshed patches:
    paramiko-test_extend_timeout.patch
    relaxed.patch
    1311.patch
  * Add support for encrypt-then-MAC (ETM) schemes (hmac-sha2-256-etm@openssh.com,
    hmac-sha2-512-etm@openssh.com) and two newer Diffie-Hellman group key exchange
    algorithms (group14, using SHA256; and group16, using SHA512).
  * Add support for Curve25519 key exchange.
  * Raise Cryptography dependency requirement to version 2.5
  * Add support for the modern (as of Python 3.3) import location of MutableMapping</changelog>
  <changelog author="mimi.vx@gmail.com" date="1561464000">- update to 2.6.0 (bsc#1200603)
- drop relaxed.patch and 1311.patch
  * add a new keyword argument to SSHClient.connect &lt;paramiko.client.SSHClient.connect&gt;
    and paramiko.transport.Transport -&gt; disabled_algorithms
  * Fix Ed25519 key handling so certain key comment lengths don't cause
    SSHException("Invalid key")
  * Add backwards-compatible support for the gssapi</changelog>
  <changelog author="mimi.vx@gmail.com" date="1576929600">- update to 2.7.1
- add configs.tar.gz with missing test data
  * full changelog at http://www.paramiko.org/changelog.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1599220800">- update to 2.7.2 (bsc#1166758, bsc#1166758, bsc#1205132)
- drop configs.tar.gz
  * Add missing test suite fixtures directory to MANIFEST.in
  * Remove leading whitespace from OpenSSH RSA test suite static key fixture,
  * Fix incorrect string formatting causing unhelpful error message annotation
    when using Kerberos/GSSAPI.
  * Fix incorrectly swapped order of p and q numbers when loading
    OpenSSH-format RSA private keys.</changelog>
  <changelog author="code@bnavigator.de" date="1602590400">- remove dependency on pytest-relaxed
  * paramiko-pr1655-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1655</changelog>
  <changelog author="steven.kowalik@suse.com" date="1607342400">- Set environment to utf-8 to allow tests to pass on Python 2. (bsc#1178341)</changelog>
  <changelog author="ecsos@opensuse.org" date="1634040000">- Update to 2.8.0
  - [Feature] #1846: Add a prefetch keyword argument to
    SFTPClient.get/SFTPClient.getfo so users who need to skip SFTP
    prefetching are able to conditionally turn it off.
  - [Bug] #1462: (via #1882) Newer server-side key exchange
    algorithms not intended to use SHA1 (diffie-hellman-group14-sha256,
    diffie-hellman-group16-sha512) were incorrectly using SHA1 after all,
    due to a bug causing them to ignore the hash_algo class attribute.
    This has been corrected.
  - [Support] #1722: Remove leading whitespace from OpenSSH RSA test
    suite static key fixture, to conform better to spec.
  - [Support] #1727: Add missing test suite fixtures directory to
    MANIFEST.in, reinstating the ability to run Paramiko’s tests from
    an sdist tarball.
  - [Support]: Update our CI to catch issues with sdist generation,
    installation and testing.
  - [Support]: Administrivia overhaul, including but not limited to:
  - Migrate CI to CircleCI
  - Primary dev branch is now main (renamed)
  - Many README edits for clarity, modernization etc; including
    a bunch more (and consistent) status badges &amp; unification with
    main project site index
  - PyPI page much more fleshed out (long_description is now filled
    in with the README; sidebar links expanded; etc)
  - flake8, pytest configs split out of setup.cfg into their own files
  - Invoke/invocations (used by maintainers/contributors) upgraded
    to modern versions
- Skip python2 to fix build errors for Leap.
- Rebase paramiko-pr1655-remove-pytest-relaxed.patch.</changelog>
  <changelog author="michael@stroeder.com" date="1647604800">- Update to 2.10.3 (bsc#1197279, CVE-2022-24302)
  Too many changes to be listed here:
  https://www.paramiko.org/changelog.html</changelog>
  <changelog author="pgajdos@suse.com" date="1649419200">- do not require python-mock for build</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 2.10.4:
  * Servers offering certificate variants of hostkey algorithms (eg
    ssh-rsa-cert-v01@openssh.com) could not have their host keys verified by
    Paramiko clients, as it only ever considered non-cert key types for that
    part of connection handshaking. This has been fixed.
  * gq PKey instances’ __eq__ did not have the usual safety guard in place to
    ensure they were being compared to another PKey object, causing occasional
    spurious BadHostKeyException (among other things). This has been fixed.
  * Update camelCase method calls against the threading module to be snake_case;
    this and related tweaks should fix some deprecation warnings under Python 3.10.</changelog>
  <changelog author="michael@stroeder.com" date="1653566400">- update to 2.11.0
  * [Feature] #1951: Add SSH config token expansion (eg %h, %p) when
    parsing ProxyJump directives.
  * [Support] #2004: (via #2011) Apply unittest skipIf to tests currently
    using SHA1 in their critical path, to avoid failures on systems starting
    to disable SHA1 outright in their crypto backends (eg RHEL 9).
  * [Support] #1838: (via #1870/#2028) Update camelCase method calls
    against the threading module to be snake_case; this and related tweaks
    should fix some deprecation warnings under Python 3.10.
  * [Support] #2038: (via #2039) Recent versions of Cryptography have
    deprecated Blowfish algorithm support; in lieu of an easy method for
    users to remove it from the list of algorithms Paramiko tries to import
    and use, we’ve decided to remove it from our “preferred algorithms” list.
    This will both discourage use of a weak algorithm, and avoid warnings.
- update to 2.10.5
  * [Bug] #2008: (via #2010) Windows-native SSH agent support as merged in
    2.10 could encounter Errno 22 OSError exceptions in some scenarios
    (eg server not cleanly closing a relevant named pipe).
    This has been worked around and should be less problematic.
  * [Bug] #2017: OpenSSH 7.7 and older has a bug preventing it from
    understanding how to perform SHA2 signature verification for RSA
    certificates (specifically certs - not keys), so when we added SHA2
    support it broke all clients using RSA certificates with these servers.
    This has been fixed in a manner similar to what OpenSSH’s own client
    does: a version check is performed and the algorithm used is downgraded
    if needed.
  * [Bug] #1933: Align signature verification algorithm with OpenSSH re:
    zero-padding signatures which don’t match their nominal size/length. This
    shouldn’t affect most users, but will help Paramiko-implemented SSH
    servers handle poorly behaved clients such as PuTTY.</changelog>
  <changelog author="code@bnavigator.de" date="1668945600">- Update to 2.12.0
  * [Feature] #2125: (also re: #2054) Add a transport_factory kwarg
    to SSHClient.connect for advanced users to gain more control
    over early Transport setup and manipulation. Thanks to Noah
    Pederson for the patch.
- Release 2.11.1
  * [Bug]: bug:1637 (via #1599) Raise SSHException explicitly when
    blank private key data is loaded, instead of the natural result
    of IndexError. This should help more bits of Paramiko or
    Paramiko-adjacent codebases to correctly handle this class of
    error. Credit: Nicholas Dietz.
  * [Bug] #1822: (via, and relating to, far too many other issues
    to mention here) Update SSHClient so it explicitly closes its
    wrapped socket object upon encountering socket errors at
    connection time. This should help somewhat with certain classes
    of memory leaks, resource warnings, and/or errors (though we
    hasten to remind everyone that Client and Transport have their
    own .close() methods for use in non-error situations!). Patch
    courtesy of @YoavCohen.
- Rename and refresh:
  - paramiko-pr1655-remove-pytest-relaxed.patch
  + paramiko-pr1665-remove-pytest-relaxed.patch
  * gh#paramiko/paramiko#1665</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mcepl@suse.com" date="1682251200">- Move documentation into main package for SLE15</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683892800">- Delete paramiko-pr1665-remove-pytest-relaxed.patch
- Add remove-icecream-dep.patch
- Update to 3.1.0:
  * [Feature] #2173: Accept single tabs as field separators (in
    addition to single spaces) in
    &lt;paramiko.hostkeys.HostKeyEntry.from_line&gt; for parity with
    OpenSSH’s KnownHosts parser. Patched by Alex Chavkin.
  * [Feature] #2013: (solving #2009, plus others) Add an explicit
    channel_timeout keyword argument to
    paramiko.client.SSHClient.connect, allowing users to configure the
    previously-hardcoded default value of 3600 seconds. Thanks to
    @VakarisZ and @ilija-lazoroski for the report and patch, with
    credit to Mike Salvatore for patch review.
  * [Support] #2178: Apply codespell to the codebase, which found a
    lot of very old minor spelling mistakes in docstrings. Also
    modernize many instances of *largs vs *args and **kwarg vs
  * *kwargs. Patch courtesy of Yaroslav Halchenko, with review from
    Brian Skinn.
- 3.0.0:
  * [Bug]: A handful of lower-level classes (notably
    paramiko.message.Message and paramiko.pkey.PKey) previously
    returned bytes objects from their implementation of __str__, even
    under Python 3; and there was never any __bytes__ method.
  * These issues have been fixed by renaming __str__ to __bytes__ and
    relying on Python’s default “stringification returns the output of
    __repr__” behavior re: any real attempts to str() such objects.
  * [Bug] #2165: Streamline some redundant (and costly) byte
    conversion calls in the packetizer and the core SFTP module. This
    should lead to some SFTP speedups at the very least. Thanks to
    Alex Gaynor for the patch.
  * [Bug] #2110: Remove some unnecessary __repr__ calls when handling
    bytes-vs-str conversions. This was apparently doing a lot of
    unintentional data processing, which adds up in some use cases –
    such as SFTP transfers, which may now be significantly faster.
    Kudos to Shuhua Zhong for catch &amp; patch.
  * [Support]: Drop support for Python versions less than 3.6,
    including Python 2. So long and thanks for all the fish!
  * [Support]: Remove the now irrelevant paramiko.py3compat module.
  * [Support]: paramiko.common.asbytes has been moved to
    paramiko.util.asbytes.
  * [Support]: PKey.__cmp__ has been removed. Ordering-oriented
    comparison of key files is unlikely to have ever made sense (the
    old implementation attempted to order by the hashes of the key
    material) and so we have not bothered setting up __lt__ and
    friends at this time. The class continues to have its original
    __eq__ untouched.
  * [Support]: The behavior of private key classes’ (ie anything
    inheriting from PKey) private key writing methods used to perform
    a manual, extra chmod call after writing. This hasn’t been
    strictly necessary since the mid 2.x release line (when key
    writing started giving the mode argument to os.open), and has now
    been removed entirely.
  * This should only be observable if you were mocking Paramiko’s
    system calls during your own testing, or similar.
  * [Support] #732: (also re: #630) SSHConfig used to straight-up
    delete the proxycommand key from config lookup results when the
    source config said ProxyCommand none. This has been altered to
    preserve the key and give it the Python value None, thus making
    the Python representation more in line with the source config
    file.
  * [Support]: paramiko.util.retry_on_signal (and any internal uses of
    same, and also any internal retries of EINTR on eg socket
    operations) has been removed. As of Python 3.5, per PEP 475, this
    functionality (and retrying EINTR generally) is now part of the
    standard library.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1695988800">- refresh remove-icecream-dep.patch
- update to 3.3.1
  detailed changelog: https://www.paramiko.org/changelog.html#</changelog>
  <changelog author="steven.kowalik@suse.com" date="1703073600">- Update to 3.4.0: (CVE-2023-48795, bsc#1218168)
  * Transport grew a new packetizer_class kwarg for overriding the
    packet-handler class used internally.
  * Address CVE 2023-48795 (aka the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    + The vulnerability only impacts encrypt-then-MAC digest algorithms in
    tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
    currently only implements hmac-sha2-(256|512)-etm in tandem with
    AES-CBC.
    + As the fix for the vulnerability requires both ends of the connection
    to cooperate, the below changes will only take effect when the remote
    end is OpenSSH &gt;= 9.6 (or equivalent, such as Paramiko in server mode,
    as of this patch version) and configured to use the new
    "strict kex" mode.
    + Paramiko will now raise an SSHException subclass (MessageOrderError)
    when protocol messages are received in unexpected order. This includes
    situations like receiving MSG_DEBUG or MSG_IGNORE during initial key
    exchange, which are no longer allowed during strict mode.
    + Key (re)negotiation -- i.e. MSG_NEWKEYS, whenever it is encountered --
    now resets packet sequence numbers. (This should be invisible to users
    during normal operation, only causing exceptions if the exploit is
    encountered, which will usually result in, again, MessageOrderError.)
    + Sequence number rollover will now raise SSHException if it occurs
    during initial key exchange (regardless of strict mode status).
  * Tweak ext-info-(c|s) detection during KEXINIT protocol phase; the
    original implementation made assumptions based on an OpenSSH
    implementation detail.
- Add patch use-64-bit-maxsize-everywhere.patch:
  * Use the 64-bit value of sys.maxsize.</changelog>
</package>
<package pkgid="136ff87e9054591008e60fbda01d34f413e600074232008f95ec3a82cef6d980" name="python311-pathspec" arch="noarch">
  <version epoch="0" ver="0.11.1" rel="150400.9.7.2"/>
  <changelog author="toddrme2178@gmail.com" date="1516190400">- Initial version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1525953600">- Update to 0.5.6
  * Improved unit tests.
  * Improved type checking.
  * `Issue #20`_: Support current directory prefix.
- Use license tag</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550145600">- Update to v0.5.9
  * Fixed file system error handling.
- from v0.5.8
  * Improved type checking.
  * Created scripts to test Python 2.6 because Tox removed support for it.
  * Improved byte string handling in Python 3.
  * Handle dangling symlinks.
- from v0.5.7
  * Fix collections deprecation warning.</changelog>
  <changelog author="tchvatal@suse.com" date="1570708800">- Update to 0.6.0:
  * Issue #24: Drop support for Python 2.6, 3.2, and 3.3.
  * Issue #25: Update README.rst.
  * Issue #26: Method to escape gitwildmatch.</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- update to 0.7.0
  * Add support for Python 3.8, and drop Python 3.4.
  * Publish bdist wheel.</changelog>
  <changelog author="jayvdb@gmail.com" date="1602072000">- Update to v0.8.0
  * Expose what patterns matched paths. Added `util.detailed_match_files()`
  * `match_tree()` doesn't return symlinks
  - Add `PathSpec.match_tree_entries` and `util.iter_tree_entries()` to
    support directories and symlinks
  - API change: `match_tree()` has been renamed to `match_tree_files()`
    The old name `match_tree()` is still available as an alias
  - API change: `match_tree_files()` now returns symlinks</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 0.8.1:
  * `Issue #43`_: Add support for addition operator</changelog>
  <changelog author="pgajdos@suse.com" date="1622548800">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="dmueller@suse.com" date="1641384000">- update to 0.9.0:
  * Raise `GitWildMatchPatternError` for invalid git patterns.
  * Fix for duplicate leading double-asterisk, and edge cases.
  * Fix matching absolute paths.
  * API change: `util.normalize_files()` now returns a
    `Dict[str, List[pathlike]]` instead of a `Dict[str, pathlike]`.
  * Added type hinting.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1662984000">- update to 0.10.1:
  * Bug fixes:
    + Fix documentation on pathspec.pattern.RegexPattern.match_file().
    + Issue #60: Remove redundant wheel dep from pyproject.toml.
    + Issue #61: Dist failure for Fedora, CentOS, EPEL.
    + Issue #62: Since version 0.10.0 pure wildcard does not work
    in some cases.
  * Improvements:
    + Restore support for legacy installations using setup.py. See
    Issue #61.
- additional changes from 0.10.0:
  * Major changes:
    + Dropped support of EOL Python 2.7, 3.5, 3.6. See Issue #47
    + The gitwildmatch pattern dir/* is now handled the same as
    dir/
    + Added pathspec.GitIgnoreSpec class (see new features)
    + Changed build system to pyproject.toml and build backend to
    setuptools.build_meta which may have unforeseen consequences
    + Renamed GitHub project from python-path-specification to
    python-pathspec. See Issue #35.
  * API changes:
    + Deprecated: pathspec.util.match_files() is an old function no
    longer used.
    + Deprecated: pathspec.match_files() is an old function no
    longer used.
    + Deprecated: pathspec.util.normalize_files() is no longer used
    + Deprecated: pathspec.util.iter_tree() is an alias for
    pathspec.util.iter_tree_files().
    + Deprecated: pathspec.iter_tree() is an alias for
    pathspec.util.iter_tree_files().
    + Deprecated: pathspec.pattern.Pattern.match() is no longer
    used. Use or implement pathspec.pattern.Pattern.match_file().
  * New features:
    + Added class pathspec.gitignore.GitIgnoreSpec (with alias
    pathspec.GitIgnoreSpec) to implement gitignore behavior not
    possible with standard PathSpec class
  * Bug fixes:
    + Issue #19: Files inside an ignored sub-directory are not
    matched.
    + Issue #41: Incorrectly (?) matches files inside directories
    that do match.
    + Issue #51: Refactor deprecated unittest aliases for Python
    3.11 compatibility.
    + Issue #53: Symlink pathspec_meta.py breaks Windows.
    + Issue #54: test_util.py uses os.symlink which can fail on
    Windows.
    + Issue #55: Backslashes at start of pattern not handled
    correctly.
    + Issue #56: pyproject.toml: include subpackages in setuptools
    config
    + Issue #57: ! doesn't exclude files in directories if the
    pattern doesn't have a trailing slash.
  * Improvements:
    + Support Python 3.10, 3.11.
    + Modernize code to Python 3.7.
    + Issue #52: match_files() is not a pure generator function,
    and it impacts tree_*() gravely.
- add BuildRequires for python &gt;= 3.7</changelog>
  <changelog author="yarunachalam@suse.com" date="1670068800">- Update to version 0.10.2:
  Bug fixes:
  * Fix failing tests on Windows.
  * Type hint on root parameter on pathspec.pathspec.PathSpec.match_tree_entries().
  * Type hint on root parameter on pathspec.pathspec.PathSpec.match_tree_files().
  * Type hint on root parameter on pathspec.util.iter_tree_entries().
  * Type hint on root parameter on pathspec.util.iter_tree_files().
  * Issue #64: IndexError with my .gitignore file when trying to build a Python package.
  Improvements:
  * Issue #58: CI: add GitHub Actions test workflow.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670932800">- Update to version 0.10.3
  * New features:
  Added utility function pathspec.util.append_dir_sep() to aid in distinguishing between directories and files on the file-system. See Issue #65.
  * Bug fixes:
  Issue #66/Pull #67: Package not marked as py.typed.
  Issue #68: Exports are considered private.
  Issue #70/Pull #71: 'Self' string literal type is Unknown in pyright.
  * Improvements:
  Issue #65: Checking directories via match_file() does not work on Path objects.</changelog>
  <changelog author="dmueller@suse.com" date="1679832000">- update to 0.11.1:
  * `Issue #74`_: Include directory should override exclude file.
  * `Pull #75`_: Fix partially unknown PathLike type.
  * Convert `os.PathLike` to a string properly using `os.fspath`.
  * Major changes:
  * Changed build backend to `flit_core.buildapi`_ from
    `setuptools.build_meta`_. Building with `setuptools` through
    `setup.py` is still supported for distributions that need it.
  * `Issue #72`_/`Pull #73`_: Please consider switching the
    build-system to flit_core to ease setuptools bootstrap.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="bb6f021cf8148c6fe1db7e282fe0a82404a4f310f5c22129fc510be37b8ff2f7" name="python311-pip" arch="noarch">
  <version epoch="0" ver="22.3.1" rel="150400.17.16.4"/>
  <changelog author="code@bnavigator.de" date="1602417600">- Update to 20.2.3
  Deprecations and Removals
  * Deprecate support for Python 3.5 (#8181)
  Features
  * Make the setup.py install deprecation warning less
    noisy. We warn only when setup.py install succeeded and
    setup.py bdist_wheel failed, as situations where both
    fails are most probably irrelevant to this deprecation.
    (#8752)
- 20.2.2
  Bug Fixes
  * Only attempt to use the keyring once and if it fails, don’t try
    again. This prevents spamming users with several keyring unlock
    prompts when they cannot unlock or don’t want to do so. (#8090)
  * Fix regression that distributions in system site-packages are
    not correctly found when a virtual environment is configured
    with system-site-packages on. (#8695)
  * Disable caching for range requests, which causes corrupted
    wheels when pip tries to obtain metadata using the feature
    fast-deps. (#8701, #8716)
  * Always use UTF-8 to read pyvenv.cfg to match the built-in venv.
    (#8717)
  * 2020 Resolver: Correctly handle marker evaluation in
    constraints and exclude them if their markers do not match the
    current environment. (#8724)
- 20.2.1
  Features
  * Ignore require-virtualenv in pip list (#8603)
  Bug Fixes
  * Correctly find already-installed distributions with dot (.) in
    the name and uninstall them when needed. (#8645)
  * Trace a better error message on installation failure due to
    invalid .data files in wheels. (#8654)
  * Fix SVN version detection for alternative SVN distributions.
    (#8665)
  * New resolver: Correctly include the base package when specified
    with extras in --no-deps mode. (#8677)
  * Use UTF-8 to handle ZIP archive entries on Python 2 according
    to PEP 427, so non-ASCII paths can be resolved as expected.
    (#8684)
  Improved Documentation
  * Add details on old resolver deprecation and removal to
    migration documentation. (#8371)
  * Fix feature flag name in docs. (#8660)
- 20.2 (2020-07-29)
  Deprecations and Removals
  * Deprecate setup.py-based builds that do not generate an .egg-
    info directory. (#6998, #8617)
  * Disallow passing install-location-related arguments in --
    install-options. (#7309)
  * Add deprecation warning for invalid requirements format
    “base&gt;=1.0[extra]” (#8288)
  * Deprecate legacy setup.py install when building a wheel failed
    for source distributions without pyproject.toml (#8368)
  * Deprecate -b/--build/--build-dir/--build-directory. Its current
    behaviour is confusing and breaks in case different versions of
    the same distribution need to be built during the resolution
    process. Using the TMPDIR/TEMP/TMP environment variable,
    possibly combined with --no-clean covers known use cases.
    (#8372)
  * Remove undocumented and deprecated option --always-unzip
    (#8408)
  Features
  * Log debugging information about pip, in pip install --verbose.
    (#3166)
  * Refine error messages to avoid showing Python tracebacks when
    an HTTP error occurs. (#5380)
  * Install wheel files directly instead of extracting them to a
    temp directory. (#6030)
  * Add a beta version of pip’s next-generation dependency
    resolver.
  * Move pip’s new resolver into beta, remove the --unstable-
    feature=resolver flag, and enable the --use-feature=2020-
    resolver flag. The new resolver is significantly stricter and
    more consistent when it receives incompatible instructions, and
    reduces support for certain kinds of Constraints Files, so some
    workarounds and workflows may break. More details about how to
    test and migrate, and how to report issues, at Changes to the
    pip dependency resolver in 20.2 (2020) . Maintainers are
    preparing to release pip 20.3, with the new resolver on by
    default, in October. (#6536)
  * Introduce a new ResolutionImpossible error, raised when pip
    encounters un-satisfiable dependency conflicts (#8546, #8377)
  * Add a subcommand debug to pip config to list available
    configuration sources and the key-value pairs defined in them.
    (#6741)
  * Warn if index pages have unexpected content-type (#6754)
  * Allow specifying --prefer-binary option in a requirements file (#7693)
  * Generate PEP 376 REQUESTED metadata for user supplied
    requirements installed by pip. (#7811)
  * Warn if package url is a vcs or an archive url with invalid
    scheme (#8128)
  * Parallelize network operations in pip list. (#8504)
  * Allow the new resolver to obtain dependency information through
    wheels lazily downloaded using HTTP range requests. To enable
    this feature, invoke pip with --use-feature=fast-deps. (#8588)
  * Support --use-feature in requirements files (#8601)
  * Bug Fixes
  * Use canonical package names while looking up already installed
    packages. (#5021)
  * Fix normalizing path on Windows when installing package on
    another logical disk. (#7625)
  * The VCS commands run by pip as subprocesses don’t merge stdout
    and stderr anymore, improving the output parsing by subsequent
    commands. (#7968)
  * Correctly treat non-ASCII entry point declarations in wheels so
    they can be installed on Windows. (#8342)
  * Update author email in config and tests to reflect
    decommissioning of pypa-dev list. (#8454)
  * Headers provided by wheels in .data directories are now
    correctly installed into the user-provided locations, such as
  - -prefix, instead of the virtual environment pip is running in.
    (#8521)
  Vendored Libraries
  * Vendored htmlib5 no longer imports deprecated
    xml.etree.cElementTree on Python 3.
  * Upgrade appdirs to 1.4.4
  * Upgrade certifi to 2020.6.20
  * Upgrade distlib to 0.3.1
  * Upgrade html5lib to 1.1
  * Upgrade idna to 2.10
  * Upgrade packaging to 20.4
  * Upgrade requests to 2.24.0
  * Upgrade six to 1.15.0
  * Upgrade toml to 0.10.1
  * Upgrade urllib3 to 1.25.9
  Improved Documentation
  * Add --no-input option to pip docs (#7688)
  * List of options supported in requirements file are extracted
    from source of truth, instead of being maintained manually.
    (#7908)
  * Fix pip config docstring so that the subcommands render
    correctly in the docs (#8072)
  * replace links to the old pypa-dev mailing list with https://
    mail.python.org/mailman3/lists/distutils-sig.python.org/
    (#8353)
  * Fix example for defining multiple values for options which
    support them (#8373)
  * Add documentation for the ResolutionImpossible error that helps
    the user fix dependency conflicts (#8459)
  * Add feature flags to docs (#8512)
  * Document how to install package extras from git branch and
    source distributions. (#8576)
- 20.2b1
  Bug Fixes
  * Correctly treat wheels containing non-ASCII file contents so
    they can be installed on Windows. (#5712)
  * Prompt the user for password if the keyring backend doesn’t
    return one (#7998)
  Improved Documentation
  * Add GitHub issue template for reporting when the dependency
    resolver fails (#8207)
- 20.1.1
  Deprecations and Removals
  * Revert building of local directories in place, restoring the
    pre-20.1 behaviour of copying to a temporary directory. (#7555)
  * Drop parallelization from pip list --outdated. (#8167)
  Bug Fixes
  * Fix metadata permission issues when umask has the executable
    bit set. (#8164)
  * Avoid unnecessary message about the wheel package not being
    installed when a wheel would not have been built. Additionally,
    clarify the message. (#8178)
- 20.1
  Process
  * Document that pip 21.0 will drop support for Python 2.7.
  Features
  * Add pip cache dir to show the cache directory. (#7350)
  Bug Fixes
  * Abort pip cache commands early when cache is disabled. (#8124)
  * Correctly set permissions on metadata files during wheel
    installation, to permit non-privileged users to read from
    system site-packages. (#8139)
- 20.1b1
  Deprecations and Removals
  * Remove emails from AUTHORS.txt to prevent usage for spamming,
    and only populate names in AUTHORS.txt at time of release
    (#5979)
  * Remove deprecated --skip-requirements-regex option. (#7297)
  * Building of local directories is now done in place, instead of
    a temporary location containing a copy of the directory tree.
    (#7555)
  * Remove unused tests/scripts/test_all_pip.py test script and the
    tests/scripts folder. (#7680)
  Features
  * pip now implements PEP 610, so pip freeze has better fidelity
    in presence of distributions installed from Direct URL
    requirements. (#609)
  * Add pip cache command for inspecting/managing pip’s wheel
    cache. (#6391)
  * Raise error if --user and --target are used together in pip
    install (#7249)
  * Significantly improve performance when --find-links points to a
    very large HTML page. (#7729)
  * Indicate when wheel building is skipped, due to lack of the
    wheel package. (#7768)
  * Change default behaviour to always cache responses from
    trusted-host source. (#7847)
  * An alpha version of a new resolver is available via --unstable-
    feature=resolver. (#988)
  Bug Fixes
  * Correctly freeze a VCS editable package when it is nested
    inside another VCS repository. (#3988)
  * Correctly handle %2F in URL parameters to avoid accidentally
    unescape them into /. (#6446)
  * Reject VCS URLs with an empty revision. (#7402)
  * Warn when an invalid URL is passed with --index-url (#7430)
  * Use better mechanism for handling temporary files, when
    recording metadata about installed files (RECORD) and the
    installer (INSTALLER). (#7699)
  * Correctly detect global site-packages availability of virtual
    environments created by PyPA’s virtualenv&gt;=20.0. (#7718)
  * Remove current directory from sys.path when invoked as
    python -m pip &lt;command&gt; (#7731)
  * Stop failing uninstallation, when trying to remove non-
    existent files. (#7856)
  * Prevent an infinite recursion with pip wheel when $TMPDIR is
    within the source directory. (#7872)
  * Significantly speedup pip list --outdated by parallelizing
    index interaction. (#7962)
  * Improve Windows compatibility when detecting writability in
    folder. (#8013)
  Vendored Libraries
  * Update semi-supported debundling script to reflect that
    appdirs is vendored.
  * Add ResolveLib as a vendored dependency.
  * Upgrade certifi to 2020.04.05.1
  * Upgrade contextlib2 to 0.6.0.post1
  * Upgrade distro to 1.5.0.
  * Upgrade idna to 2.9.
  * Upgrade msgpack to 1.0.0.
  * Upgrade packaging to 20.3.
  * Upgrade pep517 to 0.8.2.
  * Upgrade pyparsing to 2.4.7.
  * Remove pytoml as a vendored dependency.
  * Upgrade requests to 2.23.0.
  * Add toml as a vendored dependency.
  * Upgrade urllib3 to 1.25.8.
  Improved Documentation
  * Emphasize that VCS URLs using git, git+git and git+http are
    insecure due to lack of authentication and encryption (#1983)
  * Clarify the usage of --no-binary command. (#3191)
  * Clarify the usage of freeze command in the example of Using pip in your program (#7008)
  * Add a “Copyright” page. (#7767)
  * Added example of defining multiple values for options which
    support them (#7803)
- Test on test flavor without installing package
- Update pip-shipped-requests-cabundle.patch for newer certifi</changelog>
  <changelog author="code@bnavigator.de" date="1604059200">- Make executables setup compatible with multiple python3 flavors
  * gh#openSUSE/python-rpm-macros#66
  * update-alternatives for pip3
  * use %python_clone and %python_install_alternative for sip and
    sip3
  * use original bin/sip%{python_bin_suffix} as is
  * effect: consistent shebangs and specifiers inside the
    entry_point scripts</changelog>
  <changelog author="mcepl@suse.com" date="1605268800">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).
- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Actually, test the new structure of package. :$
- Remove the additional sourced setuptools*.whl and use BR on
  python-setuptools-wheel.</changelog>
  <changelog author="mcepl@suse.com" date="1607688000">- Add remove_mock.patch to remove dependency on the external mock
  package (gh#pypa/pip#9266).</changelog>
  <changelog author="mcepl@suse.com" date="1607860800">- We don't need to break Python 2.7</changelog>
  <changelog author="code@bnavigator.de" date="1607947200">- Fix the condition to really not break Python 2.7 in Leap</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 20.2.4:
  Deprecations and Removals
  * Document that certain removals can be fast tracked.
  * Document that Python versions are generally supported until
    PyPI usage falls below 5%
  Features
  * New resolver: Avoid accessing indexes when the installed
    candidate is preferred and considered good enough
  * Improve error message friendliness when an environment
    has packages with corrupted metadata
  * Cache package listings on index packages so they are guarenteed
    to stay stable during a pip command session. This also improves
    performance when a index page is accessed multiple times during
    the command session
  * New resolver: Tweak resolution logic to improve user experience
    when user-supplied requirements conflict
  Bug Fixes
  * New resolver: Correctly respect ``Requires-Python`` metadata
    to reject incompatible packages in ``--no-deps`` mode
  * New resolver: Pick up hash declarations in constraints files
    and use them to filter available distributions
  * New resolver: If a package appears multiple times in user
    specification with different ``--hash`` options, only hashes
    that present in all specifications should be allowed</changelog>
  <changelog author="schubi@suse.de" date="1631102400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="dmueller@suse.com" date="1636286400">- update to 21.3.1:
  * Always refuse installing or building projects that have no ``pyproject.toml`` nor
    ``setup.py``.
  * Tweak running-as-root detection, to check ``os.getuid`` if it exists, on
    Unix-y and non-Linux/non-MacOS machines.
  * When installing projects with a ``pyproject.toml`` in editable mode, and the build
    backend does not support :pep:`660`, prepare metadata using
    ``prepare_metadata_for_build_wheel`` instead of ``setup.py egg_info``. Also, refuse
    installing projects that only have a ``setup.cfg`` and no ``setup.py`` nor
    ``pyproject.toml``. These restore the pre-21.3 behaviour.
  * Restore compatibility of where configuration files are loaded from on MacOS
  * Upgrade pep517 to 0.12.0
  * Improve deprecation warning regarding the copying of source trees when
    installing from a local directory.
  * Suppress location mismatch warnings when pip is invoked from a Python source
    tree, so ``ensurepip`` does not emit warnings on CPython ``make install``.
  * On Python 3.10 or later, the installation scheme backend has been changed to use
    ``sysconfig``. This is to anticipate the deprecation of ``distutils`` in Python
    3.10, and its scheduled removal in 3.12. For compatibility considerations, pip
    installations running on Python 3.9 or lower will continue to use ``distutils``.
  * Remove the ``--build-dir`` option and aliases, one last time.
  * In-tree builds are now the default. ``--use-feature=in-tree-build`` is now
    ignored. ``--use-deprecated=out-of-tree-build`` may be used temporarily to ease
    the transition.
  * Un-deprecate source distribution re-installation behaviour.
  * Replace vendored appdirs with platformdirs.
  * Support `PEP 610 &lt;https://www.python.org/dev/peps/pep-0610/&gt;`_ to detect
    editable installs in ``pip freeze`` and  ``pip list``. The ``pip list`` column output
    has a new ``Editable project location`` column, and the JSON output has a new
    ``editable_project_location`` field.
  * ``pip freeze`` will now always fallback to reporting the editable project
    location when it encounters a VCS error while analyzing an editable
    requirement. Before, it sometimes reported the requirement as non-editable.
  * ``pip show`` now sorts ``Requires`` and ``Required-By`` alphabetically.
  * Do not raise error when there are no files to remove with ``pip cache purge/remove``.
    Instead log a warning and continue (to log that we removed 0 files).
  * When backtracking during dependency resolution, prefer the dependencies
    which are involved in the most recent conflict. This can significantly
    reduce the amount of backtracking required.
  * Cache requirement objects, to improve performance reducing reparses of requirement strings.
  * Support editable installs for projects that have a ``pyproject.toml`` and use a
    build backend that supports :pep:`660`.
  * When a revision is specified in a Git URL, use git's partial clone feature
    to speed up source retrieval.
  * Add a ``--debug`` flag, to enable a mode that doesn't log errors and
    propagates them to the top level instead. This is primarily to aid with
    debugging pip's crashes.
  * If a host is explicitly specified as trusted by the user (via the
  - -trusted-host option), cache HTTP responses from it in addition to HTTPS
    ones.
  * Present a better error message, when a ``file:`` URL is not found.
  * Fix the auth credential cache to allow for the case in which
    the index url contains the username, but the password comes
    from an external source, such as keyring.
  * Fix double unescape of HTML ``data-requires-python`` and ``data-yanked`` attributes.
  * New resolver: Fixes depth ordering of packages during resolution, e.g. a
    dependency 2 levels deep will be ordered before a dependecy 3 levels deep.
- drop remove_mock.patch (upstream)</changelog>
  <changelog author="mcepl@suse.com" date="1647518400">- Update to 22.0.4:
  - Drop the doctype check, that presented a warning for index
    pages that use non-compliant HTML 5.
- Update to 22.0.3:
  - Print the exception via rich.traceback, when running with
  - -debug.
  - Only calculate topological installation order, for packages
    that are going to be installed/upgraded.
  - This fixes an AssertionError that occured when determining
    installation order, for a very specific combination of
    upgrading-already-installed-package + change of dependencies
    + fetching some packages from a package index. This
    combination was especially common in Read the Docs'
    builds.
  - Use html.parser by default, instead of falling back
    to html5lib when --use-deprecated=html5lib is not
    passed.
  - Clarify that using per-requirement overrides disables the
    usage of wheels.
- Update to 22.0.2:
  - Instead of failing on index pages that use non-compliant
    HTML 5, print a deprecation warning and fall back to
    html5lib-based parsing for now. This simplifies the migration
    for non-compliant index pages, by letting such indexes
    function with a warning.
- Update to 22.0.1:
  - Accept lowercase &lt;!doctype html&gt; on index pages.
  - Properly handle links parsed by html5lib, when using
  - -use-deprecated=html5lib.
- Update to 22.0:
  - Completely replace :pypi:`tox` in our development workflow,
    with :pypi:`nox`.
  - Deprecate alternative progress bar styles, leaving only on
    and off as available choices.
  - Drop support for Python 3.6.
  - Disable location mismatch warnings on Python versions prior
    to 3.10.
  - These warnings were helping identify potential issues as part
    of the sysconfig -&gt; distutils transition, and we no longer
    need to rely on reports from older Python versions for
    information on the transition.
  - Changed PackageFinder to parse HTML documents using the
    stdlib :class:`html.parser.HTMLParser` class instead of the
    html5lib package.
  - For now, the deprecated html5lib code remains and can be used
    with the --use-deprecated=html5lib command line option.
    However, it will be removed in a future pip release.
  - Utilise rich for presenting pip's default download progress
    bar.
  - Present a better error message when an invalid wheel file is
    encountered, providing more context where the invalid wheel
    file is.
  - Documents the --require-virtualenv flag for pip install.
  - pip install &lt;tab&gt; autocompletes paths.
  - Allow Python distributors to opt-out from or opt-in to the
    sysconfig installation scheme backend by setting
    sysconfig._PIP_USE_SYSCONFIG to True or False.
  - Make it possible to deselect tests requiring cryptography
    package on systems where it cannot be installed.
  - Start using Rich for presenting error messages in
    a consistent format.
  - Improve presentation of errors from subprocesses.
  - Forward pip's verbosity configuration to VCS tools to control
    their output accordingly.
  - Optimize installation order calculation to improve
    performance when installing requirements that form a complex
    dependency graph with a large amount of edges.
  - When a package is requested by the user for upgrade,
    correctly identify that the extra-ed variant of that same
    package depended by another user-requested package is
    requesting the same package, and upgrade it accordingly.
  - Prevent pip from installing yanked releases unless explicitly
    pinned via the == or === operators.
  - Stop backtracking on build failures, by instead surfacing
    them to the user and aborting immediately. This behaviour
    provides more immediate feedback when a package cannot be
    built due to missing build dependencies or platform
    incompatibility.
  - Silence Value for &lt;location&gt; does not match warning caused by
    an erroneous patch in Slackware-distributed Python 3.9.
  - Fix an issue where pip did not consider dependencies with and
    without extras to be equal</changelog>
  <changelog author="code@bnavigator.de" date="1647604800">- Update requirements: v22 is not compatible with Python 3.6 and
  thus not suitable for SLE/Leap 15.</changelog>
  <changelog author="code@bnavigator.de" date="1647691200">- Avoid cycle: BuildRequire ca-certificates only in tests</changelog>
  <changelog author="mcepl@suse.com" date="1655985600">- Add distutils-reproducible-compile.patch to make installed
  files ordered correctly and thus builds reproducible again
  (port of the fix for bpo#29708 and gh#python/cpython#8057).</changelog>
  <changelog author="dmueller@suse.com" date="1660132800">- skip subversion tests, not that relevant to pull in
  dozens of dependencies into small bootstrap</changelog>
  <changelog author="steven.kowalik@suse.com" date="1670500800">- Update to 22.3.1: (bsc#1205478)
  * Deprecations and Removals
    + Deprecate installation with setup.py install when no-binary is enabled
    for source distributions without pyproject.toml. (#11452)
    + Deprecate installation with setup.py install when the wheel package is
    absent for source distributions without pyproject.toml. (#8559)
    + Drop --use-deprecated=out-of-tree-build. (#11001)
  * Features
    + Use the data-dist-info-metadata attribute from PEP 658 to resolve
    distribution metadata without downloading the dist yet. (#11111)
    + Add --dry-run option to pip install, to let it print what it would
    install but not actually make changes in the target environment. (#11096)
    + Add pip inspect command to obtain the list of installed distributions
    and other information about the Python environment, in JSON. (#11245)
    + Add option to install and uninstall commands to opt-out from
    running-as-root warning. (#10556)
    + Add a user interface for supplying config settings to build backends.
    (#11059)
    + Explains why specified version cannot be retrieved when Requires-Python
    is not satisfied. (#9615)
    + Validate build dependencies when using --no-build-isolation. (#9794)
  * Bug Fixes
    + Fix entry point generation of pip.X, pipX.Y, and easy_install-X.Y to
    correctly account for multi-digit Python version segments. (#11547)
    + Fix --no-index when --index-url or --extra-index-url is specified
    inside a requirements file. (#11276)
    + Ignore distributions with invalid Name in metadata instead of crashing,
    when using the importlib.metadata backend. (#11352)
    + Raise RequirementsFileParseError when parsing malformed requirements
    options that can’t be sucessfully parsed by shlex. (#11491)
    + Show pip deprecation warnings by default. (#11330)
    + Send the pip upgrade prompt to stderr. (#11282)
    + Ensure that things work correctly in environments where
    setuptools-injected distutils is available by default. (#11298)
    + pip config now normalizes names by converting underscores into
    dashes. (#9330)
    + Fallback to pyproject.toml-based builds if setup.py is present in a
    project, but setuptools cannot be imported. (#10717)
    + When checking for conflicts in the build environment, correctly skip
    requirements containing markers that do not match the current
    environment. (#10883)
    + Fix pip install issues using a proxy due to an inconsistency in how
    Requests is currently handling variable precedence in session. (#9691)
- Refresh all patches.
- Stop skipping a lot of tests, no longer required.
- Add installer to BuildRequires for the test flavor.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="mmachova@suse.com" date="1687176000">- Remove .exe files from package (bsc#1212015)</changelog>
  <changelog author="mcepl@suse.com" date="1700568000">- Add CVE-2023-5752-r-param-hg.patch to fix bsc#1217353
  (CVE-2023-5752) avoiding injection of arbitrary configuration
  through Mercurial parameter.</changelog>
</package>
<package pkgid="51bbd03bec07e0c4a4ecd38dd6de0a828de5b1395886a4322a4173e5e3afde32" name="python311-pkginfo" arch="noarch">
  <version epoch="0" ver="1.9.6" rel="150400.7.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1433246400">- Update to version 1.2.1
  * Add overlooked Trove classifier for Python 3.4.
- Changes from version 1.2 final
  * Add support for Python 3.4, PyPy3.
  * Add 100% coverage for pkginfo.commandline module.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to version 1.4.1
  * Packaging only change (invalid sdist bulit for 1.4.0).
- Update to version 1.4.0
  * Relicense under MIT license: the PSF license is not suitable for third-party libraries.
- Update to version 1.3.2
  * Packaging-only change (automate fix for wheel built for 1.3.1).
- Update to version 1.3.1
  * Packaging-only change (invalid wheel built for 1.3.0).
- Update to version 1.3.0
  * Update homepage URL to point to Launchpad, rather than PyPI.
  * Add support for building wheels.
  * Add support for Python 3.5.
  * Drop support for Python 2.6 and 3.2.
- Implement single-spec version.</changelog>
  <changelog author="hpj@urpla.net" date="1526731200">- Update to version 1.4.2
  - Use relative imports in pkginfo modules.  Supports vendoring of the
    package into setuptools.
  - Add support for ``Provides-Extra`` and ``Description-Content-Type`` fields.
    Per https://packaging.python.org/specifications/.  See:  PEP 566.
  - Remove support for old setuptools leaving ``PKG-INFO`` in the root of
    the project directory.</changelog>
  <changelog author="hpj@urpla.net" date="1526817600">- fix failing tests with sed
- enable tests</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Use noun phrase in summary.</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- version update to 1.5.0.1
  * Fix broken 'sdist'. LP #1639585.
  * Fix 'console_scripts' entry point syntax. LP #1810734.
  * Add support for JSON output from the CLI.
  * Add support for installed wheels.  E.g., 'dist-info/' dirs.
  * Add support for Python 3.6 and 3.7.
  * Drop support for Python 3.3.</changelog>
  <changelog author="jayvdb@gmail.com" date="1597579200">- Remove unnecessary build dependency nose</changelog>
  <changelog author="eroca@suse.com" date="1674216000">- Update to version 1.9.6
    1.9.6 (2023-01-08)
  - -----------------
  - Fix various typos in docs / docstrings.  LP #2002232.
    1.9.5 (2023-01-06)
  - -----------------
  - Add stricter typing checks, matching those used in 'twine'.
  - Fix typing errors / gaps reported from 'twine' CI failure.  LP #2002104.
    1.9.4 (2023-01-05)
  - -----------------
  - Fix packaging of stub file for Python typing support.
    1.9.3 (2023-01-03)
  - -----------------
  - Added stub files for Python typing support;  verify using 'mypy'. LP #1876591.
    1.9.2 (2022-11-29)
  - -----------------
  - Drop "universal" wheel support (should be redundant with
    'python_requires &gt;= 3.6', but just in case).  LP #1998258.
    1.9.1 (2022-11-29)
  - -----------------
  - Restore a deprecated alias for the '_must_decode' helper function, moved
    from 'pkginfo._compat.must_decode' to 'pkginfo.distribution._must_decode'
    in 1.90.
  - Repair unit tests broken by dropping Python 2.7 classifier.
    1.9.0 (2022-11-29)
  - -----------------
  - Drop support for Python 2.7.
  - Switch to use 'pytest' vs. 'nose', which doesn't support Python &gt; 3.9.
    1.8.3 (2022-06-08)
  - -----------------
  - Specify supported Python versions in 'setup.py' using 'python_requires'.
    LP #1977981.
    1.8.2 (2021-12-01)
  - -----------------
  - Add fix for installed distributions with '__package__' set to an empty
    string. LP #1952946.
    1.8.1 (2021-11-19)
  - -----------------
  - Add 'MANIFEST.in' to ensure example files used by tests are included
    in source distributions.  LP #1951553.
    1.8.0 (2021-11-18)
  - -----------------
  - Support new standard metadata location for installed dists. LP #1865286.
  - Don't overwrite header-based 'description' with empty payload. LP #1885458.
  - Add support for Metadata-Version 2.2. LP #1928729.
  - Add support for uncompressed tarballs for sdists.  LP #1951457.
  - Add support for Python 3.10.
    1.7.1 (2021-07-09)
  - -----------------
  - Use Python3 to build docs, and fix doctest examples to use Python3-
    compatible syntax.  LP #1933322.
    1.7.0 (2021-01-16)
  - -----------------
  - Add support for Python 3.9.
  - Drop support for Python 3.5.
    1.6.1 (2020-10-26)
  - -----------------
  - Adjust test classifiers to match supported Python versions. LP #1901127.
    1.6.0 (2020-10-20)
  - -----------------
  - Add support for Python 3.8.
    LP #1869854.
  - Drop support for Python 3.4.
  - Update tests to match setuptools' change, no longer reporting metadata
    version for installed packages w/o explicit metadata.  LP #1870197.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="0d1f28517be90a32857de657fda336fed1a43b6c7753317ebadbde7baee9fdf6" name="python311-portalocker" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="150400.10.7.4"/>
  <changelog author="mcepl@suse.com" date="1526558400">- Initial packaging effort</changelog>
  <changelog author="mcepl@suse.com" date="1526558401">- Fix specfile name</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Clear filler wording from description.</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Update to 1.4.0:
  * no upstream changelog
- Drop patch portalocker-1.2.1-old-Sphinx.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563883200">- Update to 1.5.0:
  * No upstream changelog
- Switch to github tarball to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1568116800">- Update to 1.5.1:
  * no upstream changelog</changelog>
  <changelog author="mcalabkova@suse.com" date="1584532800">- Update to 1.5.2
  * Allow for development setuptools</changelog>
  <changelog author="jayvdb@gmail.com" date="1591185600">- Update to v1.7.0
  * Fix ResourceWarning unclosed file if LockException is raised
- from v1.6.0
  * Fixed unlocking bug on Windows</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Update to 2.7.0:
  * Added fail_when_locked=False support to BoundedSemaphore thanks to
    @flaviens
- 2.6.0:
  * Added fileno() support. Fixes #80 on posix systems
- 2.5.1:
  * Added clear warning when locking in non-blocking mode without
    specifying either EXCLUSIVE or SHARED mode. Fixes #77
- 2.5.0:
  * Fixed shared locks on Windows and simplified locking mechanism
- 2.4.0:
  * Added warning when trying to use a timeout in blocking mode. And
    removed deprecated testing code and checks
- 2.3.2:
  * Added semver indicator and specified needed Python release thanks
    to @rayluo v2.3.2
- 2.3.1:
  * Removed Python 2 classifier thanks to @rayluo v2.3.1
- 2.3.0:
  * enabled PEP 561 compliance v2.3.0
- 2.2.1:
  * removed debug statement v2.2.1
- 2.2.0:
  * updated travis location
- 2.1.0:
  * Added Redis based distributed lock which gracefully handles
    connection loss and dying applications. Added full type hinting
    support. Fixed bug where the file handle was not always explicitly
    closed with errors
- v2.0.0:
  * Removed support for old Python versions. Versions 3.5 and above
    are supported. Added BoundedSemaphore class
- 1.7.1:
  * removed tests from wheel file</changelog>
</package>
<package pkgid="9dd9fc9552e8ffd655e677f188055976ba69df6ad1373ea7243993b81496b53e" name="python311-psutil" arch="aarch64">
  <version epoch="0" ver="5.9.5" rel="150400.6.9.4"/>
  <changelog author="code@bnavigator.de" date="1607688000">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
</package>
<package pkgid="af07b7ba596e544e89aa8581632ce7e057f581d1ba55203ff878afdda52478c6" name="python311-psutil" arch="ppc64le">
  <version epoch="0" ver="5.9.5" rel="150400.6.9.4"/>
  <changelog author="code@bnavigator.de" date="1607688000">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
</package>
<package pkgid="43ad3e5a86aaa7bd1fba6c9b42deb3a2bd104b39bff635e70608dfcdbe53379a" name="python311-psutil" arch="s390x">
  <version epoch="0" ver="5.9.5" rel="150400.6.9.4"/>
  <changelog author="code@bnavigator.de" date="1607688000">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
</package>
<package pkgid="69103251f0e8016e28633dfd28f28a8aafe82b66b4b004b858282af440692abc" name="python311-psutil" arch="x86_64">
  <version epoch="0" ver="5.9.5" rel="150400.6.9.4"/>
  <changelog author="code@bnavigator.de" date="1607688000">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to version 5.9.2:
  * Bug fixes
    + 2093_, [FreeBSD], **[critical]**: `pids()`_ may fail with
    ENOMEM. Dynamically increase the "malloc()" buffer size until
    it's big enough.
    + 2095_, [Linux]: `net_if_stats()`_ returns incorrect interface
    speed for 100GbE network cards.
    + 2113_, [FreeBSD], **[critical]**: `virtual_memory()`_ may raise
    ENOMEM due to missing "#include &lt;sys/param.h&gt;" directive.
    (patch by Peter Jeremy)
    + 2128_, [NetBSD]: `swap_memory()`_ was miscalculated.  (patch by
    Thomas Klausner)</changelog>
  <changelog author="arun@gmx.de" date="1666440000">- update to version 5.9.3:
  * Enhancements
    + 2040, [macOS]: provide wheels for arm64 architecture. (patch by
    Matthieu Darbois)
  * Bug fixes
    + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with
    RuntimeError.
    + 2135, [macOS]: Process.environ() may contain garbage data. Fix
    out-of-bounds read around sysctl_procargs. (patch by Bernhard
    Urban-Forster)
    + 2138, [Linux], [critical]: can't compile psutil on Android due
    to undefined ethtool_cmd_speed symbol.
    + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned
    unicode instead of str. (patch by Matthieu Darbois)
    + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by
    Matthieu Darbois)
    + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix
    race condition. (patch by Daniel Li)
    + 2153, [macOS] Fix race condition in
    test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois)</changelog>
  <changelog author="michael@stroeder.com" date="1667822400">- update to version 5.9.4:
  * Enhancements
  - 2102: use Limited API when building wheels with CPython 3.6+ on Linux,
    macOS and Windows. This allows to use pre-built wheels in all future
    versions of cPython 3. (patch by Matthieu Darbois)
  * Bug fixes
  - 2077, [Windows]: Use system-level values for virtual_memory().
    (patch by Daniel Widdis)
  - 2156, [Linux]: compilation may fail on very old gcc compilers due to
    missing SPEED_UNKNOWN definition. (patch by Amir Rossert)
  - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are
    the same value, causing a build failure. (patch by Lawrence D'Anna)</changelog>
  <changelog author="code@bnavigator.de" date="1670500800">- Require unittest2 only for python2: make this suitable for
  the 15.4_py39 target in devel:languages:python:backports.
- Merge skip-obs.patch into skip_failing_tests.patch and add
  test_linux.py::test_cpu_affinity because it depends on the
  obs vm-type or worker CPU.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683115200">- update to 5.9.5:
  * in case of exception, display a cleaner error
    traceback by hiding the `KeyError` bit deriving from a
    missed cache hit.
  * print the full traceback when a `DeprecationWarning`
    or `UserWarning` is raised.
  * there are cases where `Process.cwd()`_ cannot be
    determined (e.g. directory no longer exists), in which case
    we returned either ``None`` or an empty string.
    This was consolidated and we now return ``""`` on all
    platforms.
  * [UNIX]: if process is a zombie, and we can only
    determine part of the its truncated `Process.name()`_
    (15 chars), don't fail with `ZombieProcess`_ when we try
    to guess the full name from the `Process.cmdline()`_. Just
    return the truncated name.
  * on certain kernels, ``"MemAvailable"`` field
    from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in
    which case we calculate an approximation for ``available``
    memory which matches "free" CLI utility.
  * `disk_partitions()`_: do not unnecessarily
    read /proc/filesystems and raise `AccessDenied`_ unless user
    specified `all=False` argument.
  * `users()`_ loses precision for ``started``
    attribute (off by 1 minute).
  * if cwd no longer exists. Return an empty string instead.</changelog>
  <changelog author="aplanas@suse.com" date="1692792000">- Add logind_y2038.patch to use logind if systemd &gt;= 254 is used, to
  fix the issue of ut_tv.tv_sec and the Y2038 problem.</changelog>
</package>
<package pkgid="7aafc86c5def91d5aba5897eab664aeba8e7ae5c79f03007d2ade49affd6984a" name="python311-pyparsing" arch="noarch">
  <version epoch="0" ver="3.0.9" rel="150400.5.7.4"/>
  <changelog author="dimstar@opensuse.org" date="1547726400">- BuildIgnore python[23]-pyparsing: python-packaging requires it
  for some actions it could perform, but we don't make use of these
  here. Ignoring this dependency allows us to break open a
  BuildCycle.</changelog>
  <changelog author="tbechtold@suse.com" date="1554984000">- Do not BuildRequire python-unittest2 when no tests are executed.
  This breaks a build cycle for pyparsing-&gt;unittest2-&gt;traceback2-&gt;pbr-&gt;
  Pygments-&gt;pytest-&gt;setuptools_scm-&gt;packaging which needs pyparsing</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 2.4.0
- drop nose_to_unittest.patch
- drop _service
  * Adds a pyparsing.__compat__ object for specifying compatibility with
  future breaking changes.
  * Conditionalizes the API-breaking behavior, based on the value
  pyparsing.__compat__.collect_all_And_tokens.  By default, this value
  will be set to True, reflecting the new bugfixed behavior.
  * User code that is dependent on the pre-bugfix behavior can restore
  it by setting this value to False.
  * Updated unitTests.py and simple_unit_tests.py to be compatible with
  "python setup.py test".
  * Fixed bug in runTests handling '\n' literals in quoted strings.
  * Added tag_body attribute to the start tag expressions generated by
  makeHTMLTags, so that you can avoid using SkipTo to roll your own
  tag body expression:
  * indentedBlock failure handling was improved
  * Address Py2 incompatibility in simpleUnitTests, plus explain() and
  Forward str() cleanup
  * Fixed docstring with embedded '\w', which creates SyntaxWarnings in Py3.8.
  * Added example parser for rosettacode.org tutorial compiler.
  * Added example to show how an HTML table can be parsed into a
  collection of Python lists or dicts, one per row.
  * Updated SimpleSQL.py example to handle nested selects, reworked
  'where' expression to use infixNotation.
  * Added include_preprocessor.py, similar to macroExpander.py.
  * Examples using makeHTMLTags use new tag_body expression when
  retrieving a tag's body text.
  * Updated examples that are runnable as unit tests</changelog>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 2.4.2:
  - Updated the shorthand notation that has been added for repetition
    expressions: expr[min, max], with '...' valid as a min or max value
  - The defaults on all the `__diag__` switches have been set to False,
    to avoid getting alarming warnings. To use these diagnostics, set
    them to True after importing pyparsing.
  - Fixed bug introduced by the use of __getitem__ for repetition,
    overlooking Python's legacy implementation of iteration
    by sequentially calling __getitem__ with increasing numbers until
    getting an IndexError. Found during investigation of problem
    reported by murlock, merci!
  - Changed [...] to emit ZeroOrMore instead of OneOrMore.
  - Removed code that treats ParserElements like iterables.
  - Change all __diag__ switches to False.
- update to 2.4.1.1:
  - API change adding support for `expr[...]` - the original
    code in 2.4.1 incorrectly implemented this as OneOrMore.
    Code using this feature under this relase should explicitly
    use `expr[0, ...]` for ZeroOrMore and `expr[1, ...]` for
    OneOrMore. In 2.4.2 you will be able to write `expr[...]`
    equivalent to `ZeroOrMore(expr)`.
  - Bug if composing And, Or, MatchFirst, or Each expressions
    using an expression. This only affects code which uses
    explicit expression construction using the And, Or, etc.
    classes instead of using overloaded operators '+', '^', and
    so on. If constructing an And using a single expression,
    you may get an error that "cannot multiply ParserElement by
    0 or (0, 0)" or a Python `IndexError`.
  - Some newly-added `__diag__` switches are enabled by default,
    which may give rise to noisy user warnings for existing parsers.
- update to 2.4.1:
  - A new shorthand notation has been added for repetition
    expressions: expr[min, max], with '...' valid as a min
  - '...' can also be used as short hand for SkipTo when used
    in adding parse expressions to compose an And expression.
  - '...' can also be used as a "skip forward in case of error" expression
  - Improved exception messages to show what was actually found, not
    just what was expected.
  - Added diagnostic switches to help detect and warn about common
    parser construction mistakes, or enable additional parse
    debugging. Switches are attached to the pyparsing.__diag__
    namespace object
  - Added ParseResults.from_dict classmethod, to simplify creation
    of a ParseResults with results names using a dict, which may be nested.
    This makes it easy to add a sub-level of named items to the parsed
    tokens in a parse action.
  - Added asKeyword argument (default=False) to oneOf, to force
    keyword-style matching on the generated expressions.
  - ParserElement.runTests now accepts an optional 'file' argument to
    redirect test output to a file-like object (such as a StringIO,
    or opened file). Default is to write to sys.stdout.
  - conditionAsParseAction is a helper method for constructing a
    parse action method from a predicate function that simply
    returns a boolean result. Useful for those places where a
    predicate cannot be added using addCondition, but must be
    converted to a parse action (such as in infixNotation). May be
    used as a decorator if default message and exception types
    can be used. See ParserElement.addCondition for more details
    about the expected signature and behavior for predicate condition
    methods.
  - While investigating issue #93, I found that Or and
    addCondition could interact to select an alternative that
    is not the longest match. This is because Or first checks
    all alternatives for matches without running attached
    parse actions or conditions, orders by longest match, and
    then rechecks for matches with conditions and parse actions.
    Some expressions, when checking with conditions, may end
    up matching on a shorter token list than originally matched,
    but would be selected because of its original priority.
    This matching code has been expanded to do more extensive
    searching for matches when a second-pass check matches a
    smaller list than in the first pass.
  - Fixed issue #87, a regression in indented block.
    Reported by Renz Bagaporo, who submitted a very nice repro
    example, which makes the bug-fixing process a lot easier,
    thanks!
  - Fixed MemoryError issue #85 and #91 with str generation for
    Forwards. Thanks decalage2 and Harmon758 for your patience.
  - Modified setParseAction to accept None as an argument,
    indicating that all previously-defined parse actions for the
    expression should be cleared.
  - Modified pyparsing_common.real and sci_real to parse reals
    without leading integer digits before the decimal point,
    consistent with Python real number formats. Original PR #98
    submitted by ansobolev.
  - Modified runTests to call postParse function before dumping out
    the parsed results - allows for postParse to add further results,
    such as indications of additional validation success/failure.
  - Updated statemachine example: refactored state transitions to use
    overridden classmethods; added &lt;statename&gt;Mixin class to simplify
    definition of application classes that "own" the state object and
    delegate to it to model state-specific properties and behavior.
  - Added example nested_markup.py, showing a simple wiki markup with
    nested markup directives, and illustrating the use of '...' for
    skipping over input to match the next expression. (This example
    uses syntax that is not valid under Python 2.)
  - Rewrote delta_time.py example (renamed from deltaTime.py) to
    fix some omitted formats and upgrade to latest pyparsing idioms,
    beginning with writing an actual BNF.
  - With the help and encouragement from several contributors, including
    Matěj Cepl and Cengiz Kaygusuz, I've started cleaning up the internal
    coding styles in core pyparsing, bringing it up to modern coding
    practices from pyparsing's early development days dating back to
    2003. Whitespace has been largely standardized along PEP8 guidelines,
    removing extra spaces around parentheses, and adding them around
    arithmetic operators and after colons and commas. I was going to hold
    off on doing this work until after 2.4.1, but after cleaning up a
    few trial classes, the difference was so significant that I continued
    on to the rest of the core code base. This should facilitate future
    work and submitted PRs, allowing them to focus on substantive code
    changes, and not get sidetracked by whitespace issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Do not pull in setuptools dependency at all to avoid cycles</changelog>
  <changelog author="arun@gmx.de" date="1573905600">- update to version 2.4.5:
  * Fixed encoding when setup.py reads README.rst to include the
    project long description when uploading to PyPI. A stray unicode
    space in README.rst prevented the source install on systems whose
    default encoding is not 'utf-8'.
- changes from version 2.4.4:
  * Unresolved symbol reference in 2.4.3 release was masked by stdout
    buffering in unit tests, thanks for the prompt heads-up, Ned
    Batchelder!
- changes from version 2.4.3:
  * Fixed a bug in ParserElement.__eq__ that would for some parsers
    create a recursion error at parser definition time. Thanks to
    Michael Clerx for the assist. (Addresses issue #123)
  * Fixed bug in indentedBlock where a block that ended at the end of
    the input string could cause pyaprsing to loop forever. Raised as
    part of discussion on StackOverflow with geckos.
  * Backports from pyparsing 3.0.0:
    + __diag__.enable_all_warnings()
    + Fixed bug in PrecededBy which caused infinite recursion, issue
    [#127]
    + support for using regex-compiled RE to construct Regex
    expressions</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581422400">- update to 2.4.6
  * Fixed typos in White mapping of whitespace characters, to use
  correct "\u" prefix instead of "u".
  * fix bug in left-associative ternary operators defined using
  infixNotation. First reported on StackOverflow by user Jeronimo.
  * Backport of pyparsing_test namespace from 3.0.0, including
  TestParseResultsAsserts mixin class defining unittest-helper
  methods:
  . def assertParseResultsEquals(
  self, result, expected_list=None, expected_dict=None, msg=None)
  . def assertParseAndCheckList(
  self, expr, test_string, expected_list, msg=None, verbose=True)
  . def assertParseAndCheckDict(
  self, expr, test_string, expected_dict, msg=None, verbose=True)
  . def assertRunTestResults(
  self, run_tests_report, expected_parse_results=None, msg=None)
  . def assertRaisesParseException(self, exc_type=ParseException, msg=None)</changelog>
  <changelog author="dmueller@suse.com" date="1588680000">- update to 2.4.7:
  . Each bug with Regex expressions
  . And expressions not properly constructing with generator
  . Traceback abbreviation
  . Bug in delta_time example
  . Fix regexen in pyparsing_common.real and .sci_real
  . Avoid FutureWarning on Python 3.7 or later
  . Cleanup output in runTests if comments are embedded in test string</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- unittest2 -&gt; pytest</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(pyparsing): work around boo#1186870</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 3.0.6:
  * Added suppress_warning() method to individually suppress a warning
    on a specific ParserElement. Used to refactor original_text_for
    to preserve internal results names, which, while undocumented, had
    been adopted by some projects.
  * Fix bug when delimited_list was called with a str literal instead
    of a parse expression.
- changes from 3.0.5:
  * Added return type annotations for col, line, and lineno.
  * Fixed bug when warn_ungrouped_named_tokens_in_collection warning
    was raised when assigning a results name to an original_text_for
    expression. (Issue #110, would raise warning in packaging.)
  * Fixed internal bug where ParserElement.streamline() would not
    return self if already streamlined.
  * Changed run_tests() output to default to not showing line and
    column numbers. If line numbering is desired, call with
    with_line_numbers=True. Also fixed minor bug where separating
    line was not included after a test failure.
- changes from 3.0.4:
  * Fixed bug in which Dict classes did not correctly return tokens
    as nested ParseResults
  * Documented API-changing side-effect of converting ParseResults
    to use __slots__ to pre-define instance attributes.
  * Fixed bug in railroad diagramming where the vertical limit would
    count all expressions in a group, not just those that would
    create visible railroad elements.
- changes from 3.0.3:
  * Fixed regex typo in one_of fix for as_keyword=True.
  * Fixed a whitespace-skipping bug, Issue #319, introduced as part
    of the revert of the LineStart changes.
  * Added header column labeling &gt; 100 in with_line_numbers - some
    input lines are longer than others.
- changes from 3.0.2:
  * Reverted change in behavior with LineStart and StringStart, which
    changed the interpretation of when and how LineStart and
    StringStart should match when a line starts with spaces. In 3.0.0,
    the xxxStart expressions were not really treated like expressions
    in their own right, but as modifiers to the following expression
    when used like LineStart() + expr, so that if there were whitespace
    on the line before expr (which would match in versions prior to
    3.0.0), the match would fail.
    3.0.0 implemented this by automatically promoting LineStart() +
    expr to AtLineStart(expr), which broke existing parsers that did
    not expect expr to necessarily be right at the start of the line,
    but only be the first token found on the line. This was reported
    as a regression in Issue (gh#pyparsing/pyparsing/issues#317).
    In 3.0.2, pyparsing reverts to the previous behavior, but will
    retain the new AtLineStart and AtStringStart expression classes,
    so that parsers can chose whichever behavior applies in their
    specific instance.
  * Performance enhancement to one_of to always generate an internal
    Regex, even if caseless or as_keyword args are given as True
    (unless explicitly disabled by passing use_regex=False).
  * IndentedBlock class now works with recursive flag. By default,
    the results parsed by an IndentedBlock are grouped. This can be
    disabled by constructing the IndentedBlock with grouped=False.
- changes from 3.0.1
  * Fixed bug where Word(max=n) did not match word groups less than
    length 'n'. Thanks to Joachim Metz for catching this!
  * Fixed bug where ParseResults accidentally created recursive
    contents. Joachim Metz on this one also!
  * Fixed bug where warn_on_multiple_string_args_to_oneof warning
    is raised even when not enabled.
- changes from 3.0.0
  * A consolidated list of all the changes in the 3.0.0 release
    can be found in docs/whats_new_in_3_0_0.rst.
    (https://github.com/pyparsing/pyparsing/blob/master/docs/whats_new_in_3_0_0.rst)
- disable build for python2, not supported anymore</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755201">- requires railroad-diagrams for testing</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755202">- requires jinja2 for testing</changelog>
  <changelog author="arun@gmx.de" date="1643889600">- specfile:
  * update copyright year
- update to version 3.0.7:
  * Fixed bug #345, in which delimitedList changed expressions in
    place using expr.streamline(). Reported by Kim Gräsman, thanks!
  * Fixed bug #346, when a string of word characters was passed to
    WordStart or WordEnd instead of just taking the default
    value. Originally posted as a question by Parag on StackOverflow,
    good catch!
  * Fixed bug #350, in which White expressions could fail to match due
    to unintended whitespace-skipping. Reported by Fu Hanxi, thank
    you!
  * Fixed bug #355, when a QuotedString is defined with characters in
    its quoteChar string containing regex-significant characters such
    as ., *, ?, [, ], etc.
  * Fixed bug in ParserElement.run_tests where comments would be
    displayed using with_line_numbers.
  * Added optional "min" and "max" arguments to `delimited_list`. PR
    submitted by Marius, thanks!
  * Added new API change note in `whats_new_in_pyparsing_3_0_0`,
    regarding a bug fix in the `bool()` behavior of `ParseResults`.
  * Prior to pyparsing 3.0.x, the `ParseResults` class implementation
    of `__bool__` would return `False` if the `ParseResults` item list
    was empty, even if it contained named results. In 3.0.0 and later,
    `ParseResults` will return `True` if either the item list is not
    empty *or* if the named results dict is not empty.
  * Minor enhancement to Word generation of internal regular
    expression, to emit consecutive characters in range, such as "ab",
    as "ab", not "a-b".
  * Fixed character ranges for search terms using non-Western
    characters in booleansearchparser, PR submitted by tc-yu, nice
    work!
  * Additional type annotations on public methods.</changelog>
  <changelog author="code@bnavigator.de" date="1657800000">- Update to version 3.0.9
  * Added Unicode set BasicMultilingualPlane (may also be
    referenced as BMP) representing the Basic Multilingual Plane
    (Unicode characters up to code point 65535). Can be used to
    parse most language characters, but omits emojis, wingdings,
    etc. Raised in discussion with Dave Tapley (issue #392).
  * To address mypy confusion of pyparsing.Optional and
    typing.Optional resulting in error: "_SpecialForm" not callable
    message reported in issue #365, fixed the import in
    exceptions.py. Nice sleuthing by Iwan Aucamp and Dominic
    Davis-Foster, thank you! (Removed definitions of OptionalType,
    DictType, and IterableType and replaced them with
    typing.Optional, typing.Dict, and typing.Iterable throughout.)
  * Fixed typo in jinja2 template for railroad diagrams, thanks for
    the catch Nioub (issue #388).
  * Removed use of deprecated pkg_resources package in railroad
    diagramming code (issue #391).
  * Updated bigquery_view_parser.py example to parse examples at
    https://cloud.google.com/bigquery/docs/reference/legacy-sql
- Release 3.0.8
  * API CHANGE: modified pyproject.toml to require Python version
    3.6.8 or later for pyparsing 3.x. Earlier minor versions of 3.6
    fail in evaluating the version_info class (implemented using
    typing.NamedTuple). If you are using an earlier version of
    Python 3.6, you will need to use pyparsing 2.4.7.
  * Improved pyparsing import time by deferring regex pattern
    compiles. PR submitted by Anthony Sottile to fix issue #362,
    thanks!
  * Updated build to use flit, PR by Michał Górny, added
    BUILDING.md doc and removed old Windows build scripts - nice
    cleanup work!
  * More type-hinting added for all arithmetic and logical operator
    methods in ParserElement. PR from Kazantcev Andrey, thank you.
  * Fixed infix_notation's definitions of lpar and rpar, to accept
    parse expressions such that they do not get suppressed in the
    parsed results. PR submitted by Philippe Prados, nice work.
  * Fixed bug in railroad diagramming with expressions containing
    Combine elements. Reported by Jeremy White, thanks!
  * Added show_groups argument to create_diagram to highlight
    grouped elements with an unlabeled bounding box.
  * Added unicode_denormalizer.py to the examples as a
    demonstration of how Python's interpreter will accept Unicode
    characters in identifiers, but normalizes them back to ASCII so
    that identifiers print and 𝕡𝓻ᵢ𝓃𝘁 and 𝖕𝒓𝗂𝑛ᵗ are all
    equivalent.
  * Removed imports of deprecated sre_constants module for catching
    exceptions when compiling regular expressions. PR submitted by
    Serhiy Storchaka, thank you.
- Use python-base bundled pip as frontend for flit-core</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Split primary flavor in multibuild for possible inclusion into
  Ring0
- Remove hardcoded primary_python variable.</changelog>
  <changelog author="code@bnavigator.de" date="1663243200">- Fix incorrect usage of non-bundled pip revealed by
  python-rpm-macros update.</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- do primary/all split only for tumbleweed (similar to flit-core)</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="88d3ee2c99464f63207f83bc8cfff0934d844b370ed36270cafb9a4e82ffa6ec" name="python311-requests" arch="noarch">
  <version epoch="0" ver="2.31.0" rel="150400.6.12.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- add 5711.patch from upstream instead to remove idna&lt;3 pin</changelog>
  <changelog author="steven.kowalik@suse.com" date="1625140800">- Skip test_pyopenssl_redirect due to gh#psf/requests#5846</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 2.26.0:
  - `Session.send` now correctly resolves proxy configurations from both
    the Session and Request. Behavior now matches `Session.request`. (#5681)
  - Fixed a race condition in zip extraction when using Requests in parallel
    from zip archive. (#5707)
  - Instead of `chardet`, use the MIT-licensed `charset_normalizer` for Python3
    to remove license ambiguity for projects bundling requests.
  - Requests now supports `idna` 3.x on Python 3. `idna` 2.x will continue to
    be used on Python 2 installations. (#5711)
  - The `requests[security]` extra has been converted to a no-op install.
    PyOpenSSL is no longer the recommended secure option for Requests. (#5867)
  - Requests has officially dropped support for Python 3.5. (#5867)
- drop 5711.patch: upstream</changelog>
  <changelog author="steven.kowalik@suse.com" date="1635422400">- Correct {Build,}Requires for charset_normalizer.
- Add trustme to BuildRequires for the test suite.</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 2.27.0:
  * Officially added support for Python 3.10. (#5928)
  * Added a `requests.exceptions.JSONDecodeError` to unify JSON exceptions between
  Python 2 and 3. This gets raised in the `response.json()` method, and is
  backwards compatible as it inherits from previously thrown exceptions.
  Can be caught from `requests.exceptions.RequestException` as well. (#5856)
  * Improved error text for misnamed `InvalidSchema` and `MissingSchema`
  exceptions. This is a temporary fix until exceptions can be renamed
  (Schema-&gt;Scheme). (#6017)
  * Improved proxy parsing for proxy URLs missing a scheme. This will address
  recent changes to `urlparse` in Python 3.9+. (#5917)
  * Fixed defect in `extract_zipped_paths` which could result in an infinite loop
  for some paths. (#5851)
  * Fixed handling for `AttributeError` when calculating length of files obtained
  by `Tarfile.extractfile()`. (#5239)
  * Fixed urllib3 exception leak, wrapping `urllib3.exceptions.InvalidHeader` with
  `requests.exceptions.InvalidHeader`. (#5914)
  * Fixed bug where two Host headers were sent for chunked requests. (#5391)
  * Fixed regression in Requests 2.26.0 where `Proxy-Authorization` was
  incorrectly stripped from all requests sent with `Session.send`. (#5924)
  * Fixed performance regression in 2.26.0 for hosts with a large number of
  proxies available in the environment. (#5924)
  * Fixed idna exception leak, wrapping `UnicodeError` with
  `requests.exceptions.InvalidURL` for URLs with a leading dot (.) in the
  domain. (#5414)
  * Requests support for Python 2.7 and 3.6 will be ending in 2022. While we
  don't have exact dates, Requests 2.27.x is likely to be the last release
  series providing support.</changelog>
  <changelog author="michael@stroeder.com" date="1641384000">- update to 2.27.1
  * Fixed parsing issue that resulted in the auth component being
    dropped from proxy URLs. (#6028)</changelog>
  <changelog author="michael@stroeder.com" date="1656504000">- rebased requests-no-hardcoded-version.patch
- update to 2.28.1
  * 2.28.1 (2022-06-29)
  - Improvements
    + Speed optimization in iter_content with transition to yield from. (#6170)
  - Dependencies
    + Added support for chardet 5.0.0 (#6179)
    + Added support for charset-normalizer 2.1.0 (#6169)
  * 2.28.0 (2022-06-09)
  - Deprecations
    + warning Requests has officially dropped support for Python 2.7. warning (#6091)
    + Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091)
  - Improvements
    + Wrap JSON parsing issues in Request's JSONDecodeError for payloads
    without an encoding to make json() API consistent. (#6097)
    + Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)
    + Added provisional 3.11 support with current beta build. (#6155)
    + Requests got a makeover and we decided to paint it black. (#6095)
  - Bugfixes
    + Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable
    cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)
    + Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with
    requests.exceptions.SSLError for content and iter_content. (#6057)
    + Fixed issue where invalid Windows registry entires caused proxy resolution
    to raise an exception rather than ignoring the entry. (#6149)
    + Fixed issue where entire payload could be included in the error
    message for JSONDecodeError. (#6036)</changelog>
  <changelog author="dmueller@suse.com" date="1664452800">- requires python 3.7 or newer</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- allow using newest version of charset-normalizer (3.0+)
  * requests-allow-charset-normalizer-3.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 2.28.2:
  - Requests now supports charset\_normalizer 3.x.
  - Updated MissingSchema exception to suggest https scheme rather than http.
- drop requests-allow-charset-normalizer-3.patch (upstream)</changelog>
  <changelog author="david.anes@suse.com" date="1676548800">- Don't upper limit version of charset_normalized at runtime, too.
  * Added change to patch: requests-no-hardcoded-version.patch</changelog>
  <changelog author="steven.kowalik@suse.com" date="1683201600">- Update to 2.30.0:
  * Added support for urllib3 2.0. ￼
  * Defer chunked requests to the urllib3 implementation to improve
    standardization.
  * Relax header component requirements to support bytes/str subclasses.</changelog>
  <changelog author="kastl@b1-systems.de" date="1683288000">- add sle15_python_module_pythons</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686571200">- Delete requests-no-hardcoded-version.patch
- Security Update to 2.31.0 (bsc#1211674):
  Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential
  forwarding of Proxy-Authorization headers to destination servers when
  following HTTPS redirects.
  When proxies are defined with user info (https://user:pass@proxy:8080), Requests
  will construct a Proxy-Authorization header that is attached to the request to
  authenticate with the proxy.
  In cases where Requests receives a redirect response, it previously reattached
  the Proxy-Authorization header incorrectly, resulting in the value being
  sent through the tunneled connection to the destination server. Users who rely on
  defining their proxy credentials in the URL are strongly encouraged to upgrade
  to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy
  credentials once the change has been fully deployed.
  Users who do not use a proxy or do not supply their proxy credentials through
  the user information portion of their proxy URL are not subject to this
  vulnerability.
  Full details can be read in our Github Security Advisory
  and CVE-2023-32681.</changelog>
  <changelog author="dmueller@suse.com" date="1694433600">- switch from unmaintained brotlipy to Brotli (same as urllib3)</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)</changelog>
</package>
<package pkgid="7dc05140beeb970b3d090cd11b4cb32bdd14bc4248e5b4b72c4579d8f58f0681" name="python311-requests-oauthlib" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="150400.12.7.1"/>
  <changelog author="prusnak@opensuse.org" date="1427371200">- updated to 0.4.2:
  - New ``authorized`` property on OAuth1Session and OAuth2Session,
    which allows you to easily determine if the session is already
    authorized with OAuth tokens or not.
  - New ``TokenMissing`` and ``VerifierMissing`` exception classes
    for OAuth1Session: this will make it easier to catch and identify
    these exceptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1485777600">update to version v0.7.0
  * Subclass requests.auth.AuthBase
  * Allow fetch_token to run through a proxy
  * Cleaning the previous token before fetching a new one, to avoid a
    TokenExpiredError
  * Adapts previous commit
  * Don't nullify token before refresh
  * oauthlib raises a different error from what we expect
  * Date for 0.4.2 release is added to HISTORY
  * v0.6.2
  * Adding Backend Application Flow documentation
  * v0.6.0
  * v0.6.1
  * opt in to Travis container infrastructure
  * minor fix to the previous commit
  * v0.7.0
  * Fix TypeError in TokenMissing class (call to parent)
  * Added authorization header for token access
  * Be more explicit about Travis installing unittest2
  * OAuth1 tests for authorized boolean
  * Only set default headers if headers are None
  * rst syntax fix
  * Google has changed OAuth 2.0 endpoints
  * Use client_id and client_secret as basic auth credentials if provided
  * Add installation instructions to docs index
  * Add **request_kwargs to fetch_request_token and fetch_access_token in
    oauth1_session to be passed to post-method of requests.session
  * Allow OAuth2 session request() to take client_id and client_secret
  * typo in error message
  * Add requests-mock to tox dependencies.
  * Prune .pyc files when creating a release
  * Update google.rst
  * Test 3.5 on Travis
  * Use unittest2 when it is installed
  * Completely remove username/password basic auth logic branch
  * Add setters/getters for client_id and access_token
  * Fix up line-length in note.
  * attach the entire response object when raising TokenRequestDenied
  * MailChimp compliance fixes that work around oauthlib issue #296
  * Allow explicit bypass of basic auth logic branch
  * Add imports for Legacy Application Flow docs
  * add license title
  * Need signedtoken extra for oauthlib dependency
  * Include import in Backend Application Flow docs
  * cleaning code and checking that a password was supplied along username
  * Update real_world_example.rst
  * Added tests for OAuth2 authorized boolean
  * Keep the username/password basic auth logic branch
  * Fix typo
  * [bugfix] Add headers in refresh_token flow
  * Setter/getter for self.token
  * Don't intercept HTTP errors before OAuthlib can handle them
  * Add tox.ini
  * Verify return value of OAuth2 response (#178)
  * Fix a problem that its get method always returns 'not_authed' on Slack
  * Update Legacy Application Flow documentation
  * Check if client exists before referencing client_id
  * Response objects should have cookies, not cookes
  * Preventing sending Basic Auth headers with "None:None"
  * Users should be able to override the token when using the Slack compliance
    fix
  * cleanup docstring of OAuth1Session to fix a typo/usage error
  * Allows tokens to be refreshed via a proxy
  * Add unittest2 test dependency for Python 2.6
  * Skip rsa tests when dependencies not met
  * fixed the layout of the note
  * Rename _refresh flag to withhold_token
  * Use requests-mock library, add tests for Slack compliance fix
  * Remove misleading README example.
  * added note to the real world example explaining its caveats
  * v0.5.0
  * making operator precedence more readable
  * When refreshing tokens, pass through **kwargs
- Use pypi.io as Source url</changelog>
  <changelog author="pousaduarte@gmail.com" date="1493208000">- Update to version 0.8.0:
  * Convert package to singlespec
  * Added Outlook Calender API example
  * Mentioned file to example.rst
  * Update google.rst
  * Allow OAuth2 session request() to take client_id and client_secret
  * Add requests-mock to tox dependencies.
  * Strips new lines in fetch_token  response body
  * Prefer user-supplied auth credentials.
  * add a fitbit compliance fix
  * test successful fitbit auth calls as well
  * v0.8.0</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550404800">- Activate test suite, skipping three online tests
- Update to version 1.2.0
  * This project now depends on OAuthlib 3.0.0 and above.
  * Updated oauth2 tests to use 'sess' for an OAuth2Session instance instead
    of auth because OAuth2Session objects and methods acceept an auth
    paramether which is typically an instance of requests.auth.HTTPBasicAuth
  * OAuth2Session.fetch_token previously tried to guess how and where to
    provide "client" and "user" credentials incorrectly. This was
    incompatible with some OAuth servers and incompatible with breaking
    changes in oauthlib that seek to correctly provide the client_id.
    The older implementation also did not raise the correct exceptions when
    username and password are not present on Legacy clients.
  * Avoid automatic netrc authentication for OAuth2Session.
- from v1.1.0
  * Adjusted version specifier for oauthlib dependency
  * Dropped dependency on nose.
  * Minor changes to clean up the code and make it more readable/maintainable.
- from v1.0.0
  * Removed support for Python 2.6 and Python 3.3.
  * Added several examples to the documentation.
  * Added plentymarkets compliance fix.
  * Added a token property to OAuth1Session, to match the corresponding
    token property on OAuth2Session.</changelog>
  <changelog author="dmueller@suse.com" date="1583150400">- update to 1.3.0:
  * Instagram compliance fix
  * Added ``force_querystring`` argument to fetch_token() method on OAuth2Session</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632916800">- Use pytest to run the testsuite.</changelog>
  <changelog author="dmueller@suse.com" date="1644926400">- update to 1.3.1:
  * Add initial support for OAuth Mutual TLS (draft-ietf-oauth-mtls)
  * Add eBay compliance fix
  * Add Spotify OAuth 2 Tutorial
  * Add support for python 3.8, 3.9
  * Fixed LinkedIn Compliance Fixes
  * Fixed ReadTheDocs Documentation and sphinx errors
  * Moved pipeline to GitHub Actions</changelog>
  <changelog author="steven.kowalik@suse.com" date="1649937600">- Remove unneeded BuildRequires on mock.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="06767298be33cc6fbf749dcd3ae5c3ba7cd44791eb644722e011fef13c295078" name="python311-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="3aabf0bbe4e95d7965ec24f0fd48c3328bba60f826d36c9c8b9bc961f17cac47" name="python311-rpm" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="b0c1f8ea46870b544e6d3f24e6a5c948b3efb986d757c720af23a648c18df5af" name="python311-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="dc8a41b2a848c33218f4d668795cb55b26b90f716f918558182c5a8a405a5009" name="python311-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="a1b04110dc7b0ce8f64cef5d6b5b182e342b74ca5e339678081fb04e9a7bbe04" name="python311-scp" arch="noarch">
  <version epoch="0" ver="0.14.5" rel="150400.12.7.4"/>
  <changelog author="mardnh@gmx.de" date="1453464000">- initial package</changelog>
  <changelog author="mardnh@gmx.de" date="1471262400">- use python-setuptools instead of python-distribute</changelog>
  <changelog author="mardnh@gmx.de" date="1502020800">- Convert to singlespec</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1552478400">- Update to 0.13.1:
  * Guard against some malformed messages from the server
  * Remove all introspection logic for progress callback introduced in 0.12
  * progress callback only accept 3 arguments again
  * Introduce progress4 parameter which accepts the peername as 4th argument
  * Fix progress callback failing when it is an instance or class method
  * Fix README.rst for PyPI
  * Add possibility of getting the peer IP and port from the progress callback
  * Make putfo() work with file-like objects that don't provide getvalue()
  * Add putfo() method, allowing one to upload a file-like object
  * Add top-level get() and put() functions for convenience
  * Increase default socket time from 5 to 10 seconds</changelog>
  <changelog author="pgajdos@suse.com" date="1553515200">- version update to 0.13.2
  * Fix AssertionError in recursive get() when `_rename` is set and
    server sends a POPD at the end (`_depth &gt; 0`)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 0.13.3:
  - Fix hanging when underlying paramiko channel is closed</changelog>
  <changelog author="mardnh@gmx.de" date="1624968000">- Update to version 0.13.5
  * Fix extra space sent in SSH command-line for get(), causing
    issues on some servers.
- Update to version 0.13.4
  * Add scp_command attribute, allowing changing the command run
    on the server (for example to sudo scp)</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 0.13.6:
  * Fix put when the source directory has a trailing slash. It will now work
    similarly to rsync, copying the contents of the directory.</changelog>
  <changelog author="mardnh@gmx.de" date="1631361600">- Update to 0.14.1
  * Don't fail if 'pathlib' doesn't import (Python 2)
  * Accept 'unicode' objects as paths (Python 2)
- Update to 0.14.0
  * Accept iterables other than list and tuple in get() and put()
  * Accept pathlib.Path objects</changelog>
  <changelog author="mardnh@gmx.de" date="1631361601">- Run unittests
- Get tarball from github.com instead pythonhosted.org</changelog>
  <changelog author="mcepl@suse.com" date="1635681600">- Switch off the test suite (gh#jbardin/scp.py#167).</changelog>
  <changelog author="dmueller@suse.com" date="1641211200">- update to 0.14.2:
  * Don't fail if the remote path is a PurePath not a Path</changelog>
  <changelog author="dmueller@suse.com" date="1645531200">- update to 0.14.3:
  * Add type hints</changelog>
  <changelog author="dmueller@suse.com" date="1658232000">- update to 0.14.4:
  * Update type hints for pyright</changelog>
  <changelog author="ecsos@opensuse.org" date="1688644800">- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1689681600">- Update to 0.14.5:
  * Update docstrings to clarify sanitation and use of wildcards
  * Make sure to close the local file on errors</changelog>
</package>
<package pkgid="f027d857204013cc10beb2f7c046c72d63d1174a522930ce7c07f0fe504e34df" name="python311-service_identity" arch="noarch">
  <version epoch="0" ver="23.1.0" rel="150400.8.7.1"/>
  <changelog author="jacobwinski@gmail.com" date="1437048000">- update to 14.0.0:
  * update spec file with new requirements per instructions by upstream
  * update spec file comment out no longer needed test fail workaround
  * upstream changes:
    + Switch to year-based version numbers.
    + Port to characteristic 14.0 (get rid of deprecation warnings).
    + Package docs with sdist.
-update to 1.0.0:
  * Backward-incompatible changes:
    + Drop support for Python 3.2. There is no justification to add complexity and unnecessary function calls for a Python version that nobody uses.
  * changes:
    + Move into the Python Cryptography Authority’s GitHub account.
    + Move exceptions into service_identity.exceptions so tracebacks don’t contain private module names.
    + Promoting to stable since Twisted 14.0 is optionally depending on service_identity now.
    + Use characteristic instead of a home-grown solution.
    + idna 0.6 did some backward-incompatible fixes that broke Python 3 support. This has been fixed now therefore service_identity only works with idna 0.6 and later. Unfortunately since idna doesn’t offer version introspection, service_identity can’t warn about it.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1437048001">- alphabetize BuildRequires &amp; Requires
- remove no longer needed commented out test fail workaround</changelog>
  <changelog author="jacobwinski@gmail.com" date="1437048002">- update pkg description to reflect upstream
- rm warnings in description about this pkg being alpha / possibly broken</changelog>
  <changelog author="nemysis@gmx.ch" date="1437480000">- Change URL
- Use %{oname} instead of service_identity
- Add BuildRequires for python-Sphinx for Documentation
- Change Description
- Change Documentation add index.html
- Add Man Page</changelog>
  <changelog author="jacobwinski@gmail.com" date="1464868800">- Update to 16.0.0:
  * Changes:
    +  Officially support Python 3.5.
    +  service_identity.SubjectAltNameWarning is now raised if the server certicate lacks a proper SubjectAltName. [#9]
    +  Add a __str__ method to VerificationError.
    +  Port from characteristic to its spiritual successor attrs.
  * Backward-incompatible changes:
    +  Python 3.3 and 2.6 aren't supported anymore. They may work by chance but any effort to keep them working has ceased.
    +  pyOpenSSL versions older than 0.14 are not tested anymore. They don't even build with recent OpenSSL versions.
- Update spec file with new upstream package requirements.</changelog>
  <changelog author="okurz@suse.com" date="1498910400">- Convert to singlespec</changelog>
  <changelog author="ecsos@opensuse.org" date="1537790400">- Update to 17.0.0:
  * Deprecations:
  - Since Chrome 58 and Firefox 48 both don’t accept certificates
    that contain only a Common Name, its usage is hereby
    deprecated in service_identity too. We have been raising
    a warning since 16.0.0 and the support will be removed in
    mid-2018 for good.
  * Changes:
  - When service_identity.SubjectAltNameWarning is raised, the
    Common Name of the certificate is now included in the warning
    message. #17
  - Added cryptography.x509 backend for verifying certificates.
    [#18]
  - Wildcards (*) are now only allowed if they are the leftmost
    label in a certificate. This is common practice by all major
    browsers. #19</changelog>
  <changelog author="tchvatal@suse.com" date="1537876800">- Drop some SLE11 code that is quite useless today</changelog>
  <changelog author="bwiedemann@suse.com" date="1538395200">- Reduce parallelism of sphinx-build
  to ensure reproducible builds (boo#1102408)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="hpj@urpla.net" date="1549281600">- add local-intersphinx-inventories.patch for generating the docs
  correctly
- add fetch-intersphinx-inventories.sh to fetch the inventories</changelog>
  <changelog author="toddrme2178@gmail.com" date="1551096000">- add fetch-intersphinx-inventories.sh to the sources</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551441600">- update to 18.1.0
- drop fetch-intersphinx-inventories.sh
- drop local-intersphinx-inventories.patch
- cleanup spec + enable tests
  * pyOpenSSL is optional now if you use service_identity.cryptography.* only.
  * Added support for iPAddress subjectAltNames.</changelog>
  <changelog author="tchvatal@suse.com" date="1578052800">- Format with spec-cleaner
- Upstream seems to rebase the tarball, refetch it</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1644235200">- Update to 21.1.0:
  - Python 3.4 is not supported anymore. It has been unsupported
    by the Python core team for a while now, its PyPI downloads
    are negligible, and our CI provider removed it as a supported
    option.
  - It's very unlikely that service-identity will break under 3.4
    anytime soon, which is why we do not block its installation
    on Python 3.4. But we don't test it anymore and will block it
    once someone reports breakage.
  - service_identity.exceptions.VerificationError can now be
    pickled and is overall more well-behaved as an exception.
    This raises the requirement of attrs to 19.1.0.
- This package actually truly requires six (it is expected to
  work with Python 2.7 as well).</changelog>
  <changelog author="mcepl@suse.com" date="1677240000">- Clean up the SPEC file.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="ecsos@opensuse.org" date="1687348800">- Update to 23.1.0
  * Removed
  - All Python versions up to and including 3.7 have been dropped.
  - Support for commonName in certificates has been dropped.
    It has been deprecated since 2017 and isn't supported by any
    major browser.
  - The oldest supported pyOpenSSL version (when using the
    pyopenssl backend) is now 17.0.0.
    When using such an old pyOpenSSL version, you have to pin
    cryptography yourself to ensure compatibility between them.
    Please check out contraints/oldest-pyopenssl.txt to verify
    what we are testing against.
  * Deprecated
  - If you've used service_identity.(cryptography|pyopenssl).extract_ids(),
    please switch to the new names extract_patterns(). #56
  * Added
  - service_identity.(cryptography|pyopenssl).extract_patterns()
    are now public APIs (FKA extract_ids()).
    You can use them to extract the patterns from a certificate
    without verifying anything. #55
  - service-identity is now fully typed. #57</changelog>
</package>
<package pkgid="f7280eeced2eaafc88297160bb663f356b7c86a68687530959265c380e5dd153" name="python311-sortedcontainers" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150400.8.7.4"/>
  <changelog author="toddrme2178@gmail.com" date="1418126400">- Initial version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475409600">- Update to 1.5.3
  * No upstream changelog</changelog>
  <changelog author="aloisio@gmx.com" date="1500120000">- Update to version 1.5.7
  * Changed ``SortedList.__setitem__`` to support slices with stop
    less than start and step equal one.
  1.5.6:
  * Changed ``SortedList.__setitem__`` to support slices that alias
    itself.
  1.5.5:
  * Changed ``SortedList.extend`` to support empty iterables.
  1.5.4:
  * Changed ``SortedList.__new__`` to call
    ``SortedListWithKey.__init__`` once instead of twice.
- Build HTML documentation and put it into -doc subpackage
- Enabled tests
- Converted to singlespec</changelog>
  <changelog author="arun@gmx.de" date="1512820800">- update to version 1.5.9:
  * Dropped CPython 2.6 testing.
- changes from version 1.5.8:
  * Bugfixes
    + Added SortedList.reverse to override MutableSequence.reverse and
    raise NotImplementedError.</changelog>
  <changelog author="arun@gmx.de" date="1525953600">- specfile:
  * update copyright year
- update to version 1.5.10:
  * Improved performance of islice(...) methods.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527681600">- Update to 2.0.2
  + API Changes
  * SortedListWithKey is deprecated. Use SortedKeyList instead.
    The name SortedListWithKey remains as an alias for SortedKeyList. The
    alias will be removed in Version 3.
  * sortedcontainers.sortedlist.LOAD has moved to
    SortedList.DEFAULT_LOAD_FACTOR so that derived classes can customize the
    value.
  * SortedList._half and SortedList._dual have been removed. Use
    SortedList._load instead.
  * SortedList.add parameter val renamed to value.
  * SortedList.__contains__ parameter val renamed to value.
  * SortedList.discard parameter val renamed to value.
  * SortedList.remove parameter val renamed to value.
  * SortedList.__delitem__ parameter idx renamed to index.
  * SortedList.__getitem__ parameter idx renamed to index.
  * SortedList.__setitem__ now raises :exc:NotImplementedError. Use
    SortedList.__delitem__ and SortedList.add instead.
  * SortedList.bisect_left parameter val renamed to value.
  * SortedList.bisect_right parameter val renamed to value.
  * SortedList.bisect parameter val renamed to value.
  * SortedList.count parameter val renamed to value.
  * SortedList.append now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.extend now raises :exc:NotImplementedError. Use
    SortedList.update instead.
  * SortedList.insert now raises :exc:NotImplementedError. Use
    SortedList.add instead.
  * SortedList.pop parameter idx renamed to index.
  * SortedList.index parameter val renamed to value.
  * SortedList.__add__ parameter that renamed to other.
  * SortedList.__iadd__ parameter that renamed to other.
  * SortedList.__mul__ parameter that renamed to num.
  * SortedList.__imul__ parameter that renamed to num.
  * SortedList._make_cmp renamed to SortedList.__make_cmp.
  * SortedKeyList.add parameter val renamed to value.
  * SortedKeyList.__contains__ parameter val renamed to value.
  * SortedKeyList.discard parameter val renamed to value.
  * SortedKeyList.remove parameter val renamed to value.
  * SortedKeyList.bisect_left parameter val renamed to value.
  * SortedKeyList.bisect_right parameter val renamed to value.
  * SortedKeyList.bisect parameter val renamed to value.
  * SortedKeyList.count parameter val renamed to value.
  * SortedKeyList.append now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.extend now raises :exc:NotImplementedError. Use
    SortedKeyList.update instead.
  * SortedKeyList.insert now raises :exc:NotImplementedError. Use
    SortedKeyList.add instead.
  * SortedKeyList.index parameter val renamed to value.
  * SortedKeyList.__add__ parameter that renamed to other.
  * SortedKeyList.__radd__ added.
  * SortedKeyList.__iadd__ parameter that renamed to other.
  * SortedKeyList.__mul__ parameter that renamed to num.
  * SortedKeyList.__rmul__ added.
  * SortedKeyList.__imul__ parameter that renamed to num.
  * Removed SortedDict.iloc. Use SortedDict.keys and
    SortedKeysView instead.
  * SortedDict.fromkeys parameter seq renamed to iterable.
  * SortedDict.keys now returns SortedKeysView.
  * SortedDict.items now returns SortedItemsView.
  * SortedDict.values now returns SortedValuesView.
  * Removed SortedDict.viewkeys. Use SortedDict.keys instead.
  * Removed SortedDict.viewitems. Use SortedDict.items instead.
  * Removed SortedDict.viewvalues. Use SortedDict.values instead.
  * SortedDict.iterkeys removed. Use SortedDict.keys instead.
  * SortedDict.iteritems removed. Use SortedDict.items instead.
  * SortedDict.itervalues removed. Use SortedDict.values instead.
  * SortedDict.popitem now accepts an optional index argument. Default
    `-1`.
  * sorteddict.KeysView renamed to SortedKeysView.
  * sorteddict.ItemsView renamed to SortedItemsView.
  * sorteddict.ValuesView renamed to SortedValuesView.
  * Sorted dict views rely on collections abstract base classes: dict views and
    sequence. The SortedKeysView.__getitem__,
    SortedItemsView.__getitem__, and SortedValuesView.__getitem__
    methods are implemented and optimized. All other mixin methods use the
    default implementation provided by the base class. Prefer SortedDict
    methods to view methods when possible.
  * SortedSet._make_cmp renamed to SortedSet.__make_cmp.
  * SortedSet.symmetric_difference parameter that renamed to other.
  * SortedSet.symmetric_difference_update parameter that renamed to
    other.
  + Miscellaneous
  * Sphinx autodoc now used for API documentation.
  * All benchmarks now run on CPython 3.6 unless otherwise noted.
  * Testing now uses pytest rather than nose.
  * AppVeyor CI testing added.
  * Updated versions of alternative implementations.
  * Rename Github repo from grantjenks/sorted_containers to
    grantjenks/python-sortedcontainers.
  * Fix broken links in documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 2.1.0:
  * Small updates to docs and tests for Python 3.7.
  * Change imports for Abstract Base Classes to collections.abc to avoid warnings in Python 3.7.
  * SortedDict methods iterkeys, iteritems, itervalues, viewkeys, viewitems, and viewvalues are not implemented for Python 2. Attribute lookup now raises :exc:`AttributeError`.
  * Accessing SortedDict.iloc will emit DeprecationWarning.
  * SortedSet.__rsub__ erroneously reversed its arguments. The method has been removed in favor of the inherited Set.__rsub__ which has a correct implementation.
  * :class:`SortedKeysView` and :class:`SortedValuesView` set-operations now return :class:`SortedSet` objects to better match the semantics of version 1.
- use github tarball for tests</changelog>
  <changelog author="dmueller@suse.com" date="1592136000">- update to 2.2.2
  * Add "small slice" optimization to SortedList.__getitem__.
  * Silence warning when testing SortedList.iloc.
  * Fix a warning regarding classifiers in setup.py.
  * Change SortedDict to avoid cycles for CPython reference counting.</changelog>
  <changelog author="tchvatal@suse.com" date="1597147200">- Switch to multibuild to avoid cycles with matplotib</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.3.0:
  * Make sort order stable when updating with large iterables.</changelog>
  <changelog author="code@bnavigator.de" date="1611316800">- Remove NumPy, SciPy, and Matplotlib requirement. They are not
  used in the regular test suite.
- no multibuild needed anymore</changelog>
  <changelog author="dmueller@suse.com" date="1622980800">- update to 2.4.0:
  * Implement SortedDict methods: __or__, __ror__, and __ior__ per PEP 584.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
</package>
<package pkgid="3e11faf37e203245b8d5761a539884fbcc99f64f9c88824b56c9a8e146498861" name="python311-tabulate" arch="noarch">
  <version epoch="0" ver="0.9.0" rel="150400.11.7.4"/>
  <changelog author="tbechtold@suse.com" date="1467806400">- Add LICENSE and README</changelog>
  <changelog author="sflees@suse.de" date="1492689600">- Update to 0.7.7
  * support. Iterables of dicts. ``latex_booktabs`` format.
  * ```fancy_grid`` and ``html`` formats. Command line utility.
  * ``--float`` format option for the command line utility.
  * New table formats (``psql``, ``jira``, ``moinmoin``, ``textile``).
  * Wide character support.
  * Printing from database cursors.
  * Option to print row indices.
  * Boolean columns. Ragged rows.
  * Option to disable number parsing.
  * Bug Fixes
- Convert to single spec</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1522065600">- Update to 0.8.2
  * Bugfix release
- Changes from 0.8.1
  * Multiline data in several output formats. New latex_raw format.
  * Column-specific floating point formatting.
  * Python 3.5 &amp; 3.6 support.
  * Drop support for Python 2.6, 3.2, 3.3 (should still work).
- Run spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Add python-setuptools to Requires</changelog>
  <changelog author="jayvdb@gmail.com" date="1549454400">- Update to 0.8.3
  * Bug fixes
  * New format: `github`
  * Custom colum alignment
- Recommend wcwidth needed for wide character support
- Suggest pandas which is supported
- Run tests for wcwidth and pandas</changelog>
  <changelog author="jengelh@inai.de" date="1549454401">- Use noun phrase in summary.</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Add pr_2.patch to fix tests to use sys.executable</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 0.8.5:
  * various bugfixes
- Remove merged pr_2.patch</changelog>
  <changelog author="arun@gmx.de" date="1575201600">- specfile:
  * be more specific in %files section
- update to version 0.8.6:
  * Bug fixes.
  * Stop supporting Python 3.3, 3.4.</changelog>
  <changelog author="dmueller@suse.com" date="1583841600">- remove pandas dependency (optional test dependency, and went python 3.x only)</changelog>
  <changelog author="arun@gmx.de" date="1587816000">- update to version 0.8.7:
  * Bug fixes.
  * New format: `pretty`.
  * HTML escaping.</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- %python3_only -&gt; %python_alternative</changelog>
  <changelog author="pgajdos@suse.com" date="1610539200">- use %pytest macro</changelog>
  <changelog author="dmueller@suse.com" date="1626436800">- update to 0.8.9:
  * Bug fix. Revert support of decimal separators.
  * Python 3.9 support, 3.10 ready.
  * New formats: ``unsafehtml``, ``latex_longtable``, ``fancy_outline``.
  * Support lists of UserDicts as input.
  * Support hyperlinks in terminal output.
  * Improve testing on systems with proxies.
  * Migrate to pytest.
  * Various bug fixes and improvements.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632916800">- Remove unneeded BuildRequires on nose.</changelog>
  <changelog author="arun@gmx.de" date="1657540800">- specfile:
  * update copyright year
- update to version 0.8.10:
  * Python 3.10 support.
  * Bug fixes.
  * Column width parameter.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1676548800">- update to version 0.9.0
  * Drop support for Python 2.7, 3.5, 3.6.
  * Migrate to pyproject.toml project layout (PEP 621).
  * New output formats: `asciidoc`, various `*grid` and `*outline` formats.
  * New output features: vertical row alignment, separating lines.
  * New input format: list of dataclasses (Python 3.7 or later).
  * Support infinite iterables as row indices.
  * Improve column width options.
  * Improve support for ANSI escape sequences and document the behavior.
  * Various bug fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1684497600">- build with setuptools_scm</changelog>
</package>
<package pkgid="adaff8d9557123f6230fb80c827ca272a6d9b5aa93f65f759dba6cf2f2164a97" name="python311-tqdm" arch="noarch">
  <version epoch="0" ver="4.66.1" rel="150400.9.7.4"/>
  <changelog author="mmachova@suse.com" date="1610539200">- Update to 4.56.0
  * some tqdm.gui improvements
- Fix testsuite with pandas.patch</changelog>
  <changelog author="code@bnavigator.de" date="1612180800">- Simplify the rich supplements in the bash completions package</changelog>
  <changelog author="code@bnavigator.de" date="1613304000">- Update to 4.56.2
  * fix attribute errors when disabled (#1126)
  * add tests
- Changes in 4.56.1
  * fix repr() &amp; format_dict when disabled (#1113 &lt;- #624)
  * rename __repr__() =&gt; __str__()
  * minor documentation updates (#1113)
  * add &amp; update tests
- Test numpy only for non python36 flavor (Numpy 1.20 in TW dropped
  Python 3.6, NEP 29), tests are automatically skipped if not
  installed.
- Remove unused and untested python3 flavor BuildRequirements in
  test build: ipython, ipykernel
- Enhance IPython</changelog>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
</package>
<package pkgid="dcc281ed8d9b445f43c84f672c22ec842e2c56c728588e0d5c235e2a93033a8a" name="python311-tqdm" arch="noarch">
  <version epoch="0" ver="4.66.4" rel="150400.9.12.1"/>
  <changelog author="code@bnavigator.de" date="1613390400">- Don't test pandas at all in Ring1 staging</changelog>
  <changelog author="arun@gmx.de" date="1616932800">- specfile:
  * remove pandas.patch, seems to be included upstreams
- update to version 4.59.0:
  * add tqdm.dask.TqdmCallback (#1079, #279 &lt;- #278)
  * add asyncio.gather() (#1136)
  * add basic support for length_hint (#1068)
  * add &amp; update tests
  * misc documentation updates (#1132)
    + update contributing guide
    + update URLs
    + bash completion: add missing --delay
  * misc code tidy
    + add [notebook] extra (#1135)
- changes from version 4.58.0:
  * add start delay in seconds (#836 &lt;- #1069, #704)
  * add tests
  * misc code tidy (#1130)
  * misc documentation updates
- changes from version 4.57.0:
  * add line buffering for DummyTqdmFile (#960)
  * fix &amp; update demo notebook (#1127)
  * fix py3 urllib examples (#1127)
  * suppress deprecated pandas warnings (#824, #1094)
  * misc framework updates
  * misc tests updates
  * misc code tidy</changelog>
  <changelog author="arun@gmx.de" date="1619784000">- update to version 4.60.0:
  * add contrib.logging helpers for redirecting to tqdm.write() (#1155
    &lt;- #786)
  * support delay in notebook (#1142)
  * fix contrib.tmap, tzip not using tqdm_class (#1148)
  * add notebook tests (#1143)
  * updates &amp; misc minor fixes for documentation</changelog>
  <changelog author="arun@gmx.de" date="1625400000">- update to version 4.61.1:
  * fix utils._screen_shape_linux() sometimes raising ValueError
    (#1174)
  * minor build/CI framework updates (#1175)
  * minor documentation updates
- changes from version 4.61.0 :
  * keras support for initial_epoch (#1150 &lt;- #1138)
  * misc documentation updates
    + update &amp; shorten URLs (#1163)
    + fix typos (#1162)
  * fix &amp; update tests (#1163)
  * minor framework updates (#1163)</changelog>
  <changelog author="arun@gmx.de" date="1626955200">- update to version 4.61.2:
  * install colorama on Windows (#1139, #454)
  * add telegram support for leave=False (#1189)
  * support pandas==1.3.0 (#1199)
  * fix keras potential AttributeError (#1184 &lt;- #1183)
  * fix py3.10 asyncio tests (#1176)
  * flush stdout/err before first render (#1177)
  * misc minor build &amp; test framework updates (#1180)</changelog>
  <changelog author="arun@gmx.de" date="1630238400">- update to version 4.62.2:
  * fix notebook memory leak (#1216)
  * fix contrib.concurrent with generators (#1233 &lt;- #1231)</changelog>
  <changelog author="arun@gmx.de" date="1638014400">- update to version 4.62.3:
  * fix minor typo (#1246)
  * minor example fix (#1246)
  * misc tidying &amp; refactoring
  * misc build/dev framework updates
    + update dependencies
    + update linters
    + update docs deployment branches
  * misc test/ci updates
    + test forks
    + tidy OS &amp; Python version tests
    + bump primary python version 3.7 =&gt; 3.8
    + beta py3.10 testing
    + fix py2.7 tests
    + better timeout handling</changelog>
  <changelog author="code@bnavigator.de" date="1642852800">- Ignore deprecation warnings from pytest-asycio for compatibility
  with 0.17</changelog>
  <changelog author="arun@gmx.de" date="1647086400">- update to version 4.63.0:
  * add __reversed__()
  * add efficient __contains__()
  * improve CLI startup time (replace pkg_resources =&gt; importlib)
  * tqdm.autonotebook warning &amp; std fallback on missing ipywidgets
    (#1218 &lt;- #1082, #1217)
  * warn on positional CLI arguments
  * misc build/test framework updates
    + enable py3.10 tests
    + add conda dependencies
    + update pre-commit hooks
    + fix pytest config (nbval, asyncio)
    + fix dependencies &amp; tests
    + fix site deployment</changelog>
  <changelog author="arun@gmx.de" date="1648382400">- update to version 4.63.1:
  * fix stderr/stdout missing flush() (#1248 &lt;- #1177)
  * misc speed improvements/optimisations</changelog>
  <changelog author="arun@gmx.de" date="1649505600">- update to version 4.64.0:
  * add contrib.slack (#1313)
- changes from version 4.63.2:
  * rich: expose options kwargs (#1282)
  * autonotebook: re-enable VSCode (#1309)
  * misc docs typos (#1301, #1299)
  * update dev dependencies (#1311)</changelog>
  <changelog author="arun@gmx.de" date="1662811200">- update to 4.64.1:
  * support ipywidgets&gt;=8 (#1366, #1361 &lt;- #1310, #1359, #1360, #1364)
    + fix jupyter lab display
    + update notebook tests</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 4.65.0:
  * add Python 3.11 and drop Python 3.6 support
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="arun@gmx.de" date="1691668800">- specfile:
  * switched to pyproject.toml build
- update to version 4.66.1:
  * fix utils.envwrap types (#1493 &lt;- #1491, #1320 &lt;- #966, #1319)
    e.g. cloudwatch &amp; kubernetes workaround: export TQDM_POSITION=-1
  * drop mentions of unsupported Python versions
- changes from version 4.66.0:
  * environment variables to override defaults (TQDM_*) (#1491 &lt;-
    [#1061], #950 &lt;- #614, #1318, #619, #612, #370) e.g. in CI jobs,
    export TQDM_MININTERVAL=5 to avoid log spam add tests &amp; docs for
    tqdm.utils.envwrap
  * fix &amp; update CLI completion
  * fix &amp; update API docs
  * minor code tidy: replace os.path =&gt; pathlib.Path
  * fix docs image hosting
  * release with CI bot account again (cli/cli#6680)
- changes from version 4.65.2:
  * exclude examples from distributed wheel (#1492)
- changes from version 4.65.1:
  * add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 &lt;-
    [#720], #620)
  * misc code &amp; docs tidy
  * fix &amp; update CI workflows &amp; tests</changelog>
  <changelog author="ecsos@opensuse.org" date="1693396800">- %{?sle15_python_module_pythons} must at beginning of spec to work.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1700827200">- Add patch sprinkle-in-timezone.patch:
  * Add a timezone to the call fromtimestamp()
- Switch to autosetup macro.
- Remove conditionals from some BuildRequires.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715083200">- Update to 4.66.4:
  * rich: fix completion (#1395 &lt;- #1306)
  * cli: eval safety (CVE-2024-34062, bsc#1223880)
  * pandas: add DataFrame.progress_map (#1549)
  * notebook: fix HTML padding (#1506)
  * keras: fix resuming training when verbose&gt;=2 (#1508)
  * fix format_num negative fractions missing leading zero (#1548)
  * fix Python 3.12 DeprecationWarning on import (#1519)
- Drop patch sprinkle-in-timezone.patch: Included upstream.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1715947200">- Re-add conditionals to numpy/pandas, it is required.</changelog>
</package>
<package pkgid="2deafb18abc8ded6ee8883550806f20826764d3fdb2cc83302539748819639be" name="python311-websocket-client" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="150400.13.7.1"/>
  <changelog author="toddrme2178@gmail.com" date="1502798400">- Update license to LGPL 3
- Fix rpmlint issues</changelog>
  <changelog author="tbechtold@suse.com" date="1503921600">- Fix build for Leap 42.3</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- properly provide/obsolete python3-websocket-client-test</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1516276800">- update to version 0.46.0 (shortened):
  - fixed invalid character (#379)
- update to version 0.45.0 (shortened):
  - change license to LGP v2.1
  - allow reuse of WebsocketApp.run_forever (#365)
  - Parse close frame response correctly when reason present (#354)
  - Wrap socket.gaierror with subclass of WebsocketException (#352)
  - Resolve a proxy issue and a connection error (#345)
  - Allow empty Host header value (#369)
  - Fix undefined variable (#347)
  - fix: getting a value with the key 'ca_certs' in sslopt dict (#326)
- Add use_system_cabundle.patch to use systems ca bundle file by default (bnc#1076519)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="tchvatal@suse.com" date="1551873600">- Update to 0.54.0:
  * many fixes all around, see ChangeLog file
- Drop merged use_system_cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1555416000">- Update to 0.56.0:
  * Don't retry sockets with timeout set to 0(#536)
  * Add response headers in WebSocketBadStatusException (#501)
  * Manually assigning WebSocket-Version (#506)
  * SSL socket handling fix (#474)
  * Let setup.py use the same license as LICENSE file (#517)
  * Ensure that "timeout" is passed down, when calling WebSocket.connect() (#513)
  * Retry connect on "Interrupted system call" (#528)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580990400">- update to 0.57.0
  * wsdump: Fix --headers option
  * Fix getting 400 bad request with long proxy authorization string
  * Create dummy `ssl` object
  * Show compressed text messages in wsdump.py
  * Expose http connection header to user
  * fix the compatible issue with gevent+dnspython
  * _handshake: hasattr checks on six before accessing the values</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1619697600">- remove RHEL 7 compatibility from specfile
- update to version 0.58.0:
  - fix callback
  - Capitalize default connection header
  - Fix None.lower() when sec-websocket-protocol response header does notexist
  - Fix for #516
  - Tweak Python 3.4 build settings
  - fix callback
  - Fix None.lower() when sec-websocket-protocol response header doesn't exist
  - Create README.md and fix minor typo (both from existing pull requests)
  - Fix _handshake.py error where subproto is None
  - fix documentation: create_connection, settimeout
  - Capitalize default connection header
  - Edit README.md for clarification and to add missing material from parent repo
  - Fix minor typo - getdefauttimeout to getdefaulttimeout
  - Remove README text copied from fork that is not applicable
  - Add support for Python 3.8 and 3.9 (#596)
  - Fix a few minor typo/misspellings (#659)
  - Add pip command to README for 2nd dependency
  - Improve README code example formatting
  - Use thread.is_alive() to replace deprecated thread.isAlive() (#594)
  - Add first draft of Sphinx documentation
  - Edit README.md to include docs links and badges
  - Replace README.md FAQ with link to documentation FAQ page
  - Add acknowledgements section to README.md
  - Add detail to Autobahn testing README (still needs improvement)
  - Add autobahn test report and additional test instructions
  - Add sample connection code to example docs page
  - Fixes #631
  - Improve documentation, mostly new examples but some code comment upgrades
  - Add suppress origin example to documentation
  - Add FAQ advice to ping server
  - 'ping_interval' should be less than 'ping_timeout' (#611)
  - Allow optional, not mandatory, argument for pong() in WebSocket
  - Add basic ping/pong and HTTP proxy documentation and examples
  - Properly revert _app.py callback to state before PR #442 (previously only partially reverted)
  - Add timeout examples to documentation
  - Edit documentation to clarify timeout can be int or float (#654)
  - Reshuffle and enhance documentation
  - Fix #526 by reverting invalid BSD license migration in commit e94ed9e to return to LGPL2.1
  - Fix #526 by reverting invalid BSD license migration in commit e94ed9e to return to LGPL2.1
  - Fix #546 by removing comments introduced by PR #513
  - Update contribution guidelines
  - Revert PR #611
  - Replace deprecated assertEquals() with assertEqual()
  - The plural 'assertEquals()' is deprecated in Python 3 and triggers a warning
  - during CI:
  - https://docs.python.org/3/library/unittest.html#deprecated-aliases</changelog>
  <changelog author="schubi@suse.de" date="1629806400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649764800">- Update to version 1.3.2
  * Add support for pre-initialized stream socket in new WebSocketApp (#804)
  * Remove rel.saferead() in examples (f0bf03d)
  * Increase scope of linting checks (dca4022)
  * Start adding type hints (a8a4099)
- from version 1.3.1
  * Fix 10 year old bug and improve dispatcher handling
    for run_forever (#795)
  * Fix run_forever to never return None, only
    return True or False, and add two tests (#788)
  * Remove Python 3.6 support, EOL in Dec 2021
- from version 1.3.0
  * BREAKING: Set Origin header to use https:// scheme
    when wss:// WebSocket URL is passed (#787)
  * Replace deprecated/broken WebSocket URLs with working ones (6ad5197)
  * Add documentation referencing rel for automatic
    reconnection with run_forever()
  * Add missing opcodes 1012, 1013 (#771)
  * Add errno.ENETUNREACH to improve error handling (da1b050)
  * Minor documentation improvements and typo fixes
- from version 1.2.3
  * Fix broken run_forever() functionality (#769)
- from version 1.2.2
  * Migrate wsdump script in setup.py from scripts to newer entry_points (#763)
  * Add support for ssl.SSLContext for arbitrary SSL parameters (#762)
  * Remove keep_running variable (#752)
  * Remove HAVE_CONTEXT_CHECK_HOSTNAME variable (dac1692)
  * Replace deprecated ssl.PROTOCOL_TLS with ssl.PROTOCOL_TLS_CLIENT (#760)
  * Simplify code and improve Python 3 support (#751, #750, #746)
  * Fill default license template fields (#748)
  * Update CI tests
  * Improve documentation (#732, #733, #734, #737, #766, #768)
- from version 1.2.1
  * Fix python-socks dependency issue mentioned in #728
  * Replace echo.websocket.org with a local websockets
    echo server for unit tests (4951de2)
- from version 1.2.0
  * Fix #697, #665: Transition from LGPL 2.1 license to Apache 2.0 license
  * Revert #417 and reimplement SOCKS proxy support with
    python-socks instead of PySocks (fbcbd43)
- from version 1.1.1
  * Fix #377: increase exception verbosity in _app.py callback exception
  * Fix #717: race condition during connection close
  * Fix #722: improve handling where credentials include symbols like @
  * Fix #711: improve handling if ssl is None
- from version 1.1.0
  * Set enable_multithread to True by default (beb135a)
  * Performance improvement in _mask() function (287970e, #433)
  * Performance improvement in recv_strict() function (60e4711, #255)
  * Performance improvement by removing numpy-related code (a462d45)
  * Support uppercase no_proxy, http_proxy, https_proxy env vars (150df4f, #700)
  * Add sslopt 'server_hostname' support (#698)
  * Replace deprecated ssl.PROTOCOL_SSLv23 with ssl.PROTOCOL_TLS (494564f)
  * Update documentation, README (7c9d604, #704)
- from version 1.0.1
  * Fix exception handling bug #694
- from version 1.0.0
  * Removed Python 2 code, now only Python 3 compatible (d45343b, b7c5733, ff67af8)
  * Use semver for release versions, unlike breaking release 0.58.0 (#669)
  * Enhance enableTrace output (13e83b4)
  * Improve unit tests to over 80% code coverage (1679ab0, a00dd2d, etc.)
  * Fix old _app.py close status code bug (resulted in on_close() requiring 3 args) (#686)
  * Replace select import with selectors (#568)
- from version 0.59.0
  * Last main release to support Python 2
  * Fix Python 2 urlparse scheme (#332)
  * Add support for headers with multiple values (#627)
  * Add debug support for reserved custom status codes (#639)
  * Allow multiple Set-Cookie: headers (#649)
  * Simplified cookie sorting (#662)
  * Add no_proxy support (#671)
  * Add Host header to HTTP proxy request (#677)
  * Improve PEP8 style compliance (dc3f5c4)
- Drop support for Python2 which was removed upstream
- Rename README.rst to README.md in %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="yarunachalam@suse.com" date="1665489600">- Update to version 1.4.1
  - Fix stack growth bug when `run_forever` reconnects (#854)
  - Add doctest CI for sphinx docs code examples (d150099)
  - General docs improvements</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 1.4.2
  - create_dispatcher is determined by URL ws/wss, NOT by presence of sslopt args, to maintain consistency (#875)
  - Remove redundant key generation line (#864)
  - Updated docs to fix old links and updated CI to include Python 3.11</changelog>
  <changelog author="pgajdos@suse.com" date="1668427200">- python-six is not required</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683720000">- update to 1.5.1:
  * Fix logic bug that can cause disconnects
  * Refactor and improve ping/pong logic to resolve several
    issues, including an infinite loop issue during reconnect
  * Fix issue where `skip_utf8_validation = True` is ignored
  * Fix issue where sslopt `is_ssl` is ignored
  * Downgrade "websocket connected" message from logging.warning
    to logging.info</changelog>
</package>
<package pkgid="50dac3ddffc97cbfdf037335418eb01e8e54212f247b582fc5a996f68ddd4f1c" name="python311-wrapt" arch="aarch64">
  <version epoch="0" ver="1.15.0" rel="150400.12.7.1"/>
  <changelog author="hpj@urpla.net" date="1415102400">- version 1.9: initial build</changelog>
  <changelog author="michael@stroeder.com" date="1455624000">- update to 1.10.6</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version 1.10.8
  * Increment version to 1.10.8.
  * Fix modulo operator on ObjectProxy
  * Increment version to 1.10.7.
  * Document mod operator bug in Python variant of object proxy.
  * Update copyright year.
  * Fix tests for floordiv and mod.
  * Remove reference to inspect.getargspec() as removed in Python 3.6. #64
- Use pypi.io as Source url</changelog>
  <changelog author="jmatejek@suse.com" date="1488196800">- update for singlespec</changelog>
  <changelog author="adrian@suse.de" date="1499601600">- update to version 1.10.10:
  * Added back missing description and categorisations when releasing
  to PyPi.
  * Code for inspect.getargspec() when using Python 2.6 was missing
  import of sys module.</changelog>
  <changelog author="tchvatal@suse.com" date="1552305600">- Update to 1.11.1:
  * Many bugfixes all around
  * see changes.rst for detailed list
- Switch to github to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.11.2:
  * Fix possible crash when garbage collection kicks in when invoking a destructor of wrapped object.</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 1.12.0:
  * Provided that you only want to support Python 3.7, when deriving from
    a base class which has a decorator applied to it, you no longer need
    to access the true type of the base class using ``__wrapped__`` in
    the inherited class list of the derived class.
  * When using the ``synchronized`` decorator on instance methods of a
    class, if the class declared special methods to override the result for
    when the class instance was tested as a boolean so that it returned
    ``False`` all the time, the synchronized method would fail when called.
  * When using an adapter function to change the signature of the decorated
    function, ``inspect.signature()`` was returning the wrong signature
    when an instance method was inspected by accessing the method via the
    class type.</changelog>
  <changelog author="dmueller@suse.com" date="1584360000">- update to 1.12.1:
  * Applying a function wrapper to a static method of a class using the
  ``wrap_function_wrapper()`` function, or wrapper for the same, wasn't
  being done correctly when the static method was the immediate child of
  the target object. It was working when the name path had multiple name
  components. A failure would subsequently occur when the static method
  was called via an instance of the class, rather than the class.</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- Fix python3.6 build with pytest 6
  * fix-dummy-collector-pytest6.patch
  * gh#GrahamDumpleton/wrapt#168</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Fix python39 test suite failures
  * wrapt-pr161-py39tests.patch
  * gh#GrahamDumpleton/wrapt#161</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 1.13.2:
  * Note that the next signficant release of `wrapt` will drop support for
    Python 2.7 and Python 3.5.
  * Fix Python version constraint so PyPi classifier for ``pip`` requires
    Python 2.7 or Python 3.5+.
  * When a reference to a class method was taken out of a class, and then
    wrapped in a function wrapper, and called, the class type was not being
    passed as the instance argument, but as the first argument in args,
    with the instance being ``None``. The class type should have been passed
    as the instance argument.
  * If supplying an adapter function for a signature changing decorator
    using input in the form of a function argument specification, name lookup
    exceptions would occur where the adaptor function had annotations which
    referenced non builtin Python types. Although the issues have been
    addressed where using input data in the format usually returned by
    ``inspect.getfullargspec()`` to pass the function argument specification,
    you can still have problems when supplying a function signature as
    string. In the latter case only Python builtin types can be referenced
    in annotations.
  * When a decorator was applied on top of a data/non-data descriptor in a
    class definition, the call to the special method ``__set_name__()`` to
    notify the descriptor of the variable name was not being propogated. Note
    that this issue has been addressed in the ``FunctionWrapper`` used by
    ``@wrapt.decorator`` but has not been applied to the generic
    ``ObjectProxy`` class. If using ``ObjectProxy`` directly to construct a
    custom wrapper which is applied to a descriptor, you will need to
    propogate the ``__set_name__()`` call yourself if required.
  * The ``issubclass()`` builtin method would give incorrect results when used
    with a class which had a decorator applied to it. Note that this has only
    been able to be fixed for Python 3.7+. Also, due to what is arguably a
    bug (https://bugs.python.org/issue44847) in the Python standard library,
    you will still have problems when the class heirarchy uses a base class
    which has the ``abc.ABCMeta`` metaclass. In this later case an exception
    will be raised of ``TypeError: issubclass() arg 1 must be a class``.
- drop fix-dummy-collector-pytest6.patch, wrapt-pr161-py39tests.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.13.3:
  * Adds wheels for Python 3.10 on PyPi and where possible also now
  generating binary wheels for ``musllinux``.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.14.1:
  * When the post import hooks mechanism was being used, and a Python package with
    its own custom module importer was used, importing modules could fail if the
    custom module importer didn't use the latest Python import hook finder/loader
    APIs and instead used the deprecated API. This was actually occurring with the
    `zipimporter` in Python itself, which was not updated to use the newer Python
    APIs until Python 3.10.
  * *Bugs Fixed**
  * Python 3.11 dropped ``inspect.formatargspec()`` which was used in creating
    signature changing decorators. Now bundling a version of this function
    which uses ``Parameter`` and ``Signature`` from ``inspect`` module when
    available. The replacement function is exposed as ``wrapt.formatargspec()``
    if need it for your own code.
  * When using a decorator on a class, ``isinstance()`` checks wouldn't previously
    work as expected and you had to manually use ``Type.__wrapped__`` to access
    the real type when doing instance checks. The ``__instancecheck__`` hook is
    now implemented such that you don't have to use ``Type.__wrapped__`` instead
    of ``Type`` as last argument to ``isinstance()``.
  * Eliminated deprecation warnings related to Python module import system, which
    would have turned into broken code in Python 3.12. This was used by the post
    import hook mechanism.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 1.15.0:
  * When the C extension for wrapt was being used, and a property
    was used on an object proxy wrapping another object to intercept
    access to an attribute of the same name on the wrapped object,
    if the function implementing the property
    raised an exception, then the exception was ignored and not
    propagated back to the caller.
  * Address issue where the post import hook mechanism of wrapt
    wasn't transparent and left the __loader__ and __spec__.loader
    attributes of a module as the wrapt import hook loader and
    not the original loader.
  * Address issues where a thread deadlock could occur within the
    wrapt module import handler, when code executed from a post
    import hook created a new thread and code executed in the
    context of the new thread itself tried to register a post
    import hook, or imported a new module.
  * When using ``CallableObjectProxy`` as a wrapper for a type or
    function and calling the wrapped object, it was not possible
    to pass a keyword argument named ``self``.</changelog>
</package>
<package pkgid="c47c9128b8472077d85b7c6e9909448c3ca2a2614116be2eaef937c88d5d1482" name="python311-wrapt" arch="ppc64le">
  <version epoch="0" ver="1.15.0" rel="150400.12.7.1"/>
  <changelog author="hpj@urpla.net" date="1415102400">- version 1.9: initial build</changelog>
  <changelog author="michael@stroeder.com" date="1455624000">- update to 1.10.6</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version 1.10.8
  * Increment version to 1.10.8.
  * Fix modulo operator on ObjectProxy
  * Increment version to 1.10.7.
  * Document mod operator bug in Python variant of object proxy.
  * Update copyright year.
  * Fix tests for floordiv and mod.
  * Remove reference to inspect.getargspec() as removed in Python 3.6. #64
- Use pypi.io as Source url</changelog>
  <changelog author="jmatejek@suse.com" date="1488196800">- update for singlespec</changelog>
  <changelog author="adrian@suse.de" date="1499601600">- update to version 1.10.10:
  * Added back missing description and categorisations when releasing
  to PyPi.
  * Code for inspect.getargspec() when using Python 2.6 was missing
  import of sys module.</changelog>
  <changelog author="tchvatal@suse.com" date="1552305600">- Update to 1.11.1:
  * Many bugfixes all around
  * see changes.rst for detailed list
- Switch to github to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.11.2:
  * Fix possible crash when garbage collection kicks in when invoking a destructor of wrapped object.</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 1.12.0:
  * Provided that you only want to support Python 3.7, when deriving from
    a base class which has a decorator applied to it, you no longer need
    to access the true type of the base class using ``__wrapped__`` in
    the inherited class list of the derived class.
  * When using the ``synchronized`` decorator on instance methods of a
    class, if the class declared special methods to override the result for
    when the class instance was tested as a boolean so that it returned
    ``False`` all the time, the synchronized method would fail when called.
  * When using an adapter function to change the signature of the decorated
    function, ``inspect.signature()`` was returning the wrong signature
    when an instance method was inspected by accessing the method via the
    class type.</changelog>
  <changelog author="dmueller@suse.com" date="1584360000">- update to 1.12.1:
  * Applying a function wrapper to a static method of a class using the
  ``wrap_function_wrapper()`` function, or wrapper for the same, wasn't
  being done correctly when the static method was the immediate child of
  the target object. It was working when the name path had multiple name
  components. A failure would subsequently occur when the static method
  was called via an instance of the class, rather than the class.</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- Fix python3.6 build with pytest 6
  * fix-dummy-collector-pytest6.patch
  * gh#GrahamDumpleton/wrapt#168</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Fix python39 test suite failures
  * wrapt-pr161-py39tests.patch
  * gh#GrahamDumpleton/wrapt#161</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 1.13.2:
  * Note that the next signficant release of `wrapt` will drop support for
    Python 2.7 and Python 3.5.
  * Fix Python version constraint so PyPi classifier for ``pip`` requires
    Python 2.7 or Python 3.5+.
  * When a reference to a class method was taken out of a class, and then
    wrapped in a function wrapper, and called, the class type was not being
    passed as the instance argument, but as the first argument in args,
    with the instance being ``None``. The class type should have been passed
    as the instance argument.
  * If supplying an adapter function for a signature changing decorator
    using input in the form of a function argument specification, name lookup
    exceptions would occur where the adaptor function had annotations which
    referenced non builtin Python types. Although the issues have been
    addressed where using input data in the format usually returned by
    ``inspect.getfullargspec()`` to pass the function argument specification,
    you can still have problems when supplying a function signature as
    string. In the latter case only Python builtin types can be referenced
    in annotations.
  * When a decorator was applied on top of a data/non-data descriptor in a
    class definition, the call to the special method ``__set_name__()`` to
    notify the descriptor of the variable name was not being propogated. Note
    that this issue has been addressed in the ``FunctionWrapper`` used by
    ``@wrapt.decorator`` but has not been applied to the generic
    ``ObjectProxy`` class. If using ``ObjectProxy`` directly to construct a
    custom wrapper which is applied to a descriptor, you will need to
    propogate the ``__set_name__()`` call yourself if required.
  * The ``issubclass()`` builtin method would give incorrect results when used
    with a class which had a decorator applied to it. Note that this has only
    been able to be fixed for Python 3.7+. Also, due to what is arguably a
    bug (https://bugs.python.org/issue44847) in the Python standard library,
    you will still have problems when the class heirarchy uses a base class
    which has the ``abc.ABCMeta`` metaclass. In this later case an exception
    will be raised of ``TypeError: issubclass() arg 1 must be a class``.
- drop fix-dummy-collector-pytest6.patch, wrapt-pr161-py39tests.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.13.3:
  * Adds wheels for Python 3.10 on PyPi and where possible also now
  generating binary wheels for ``musllinux``.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.14.1:
  * When the post import hooks mechanism was being used, and a Python package with
    its own custom module importer was used, importing modules could fail if the
    custom module importer didn't use the latest Python import hook finder/loader
    APIs and instead used the deprecated API. This was actually occurring with the
    `zipimporter` in Python itself, which was not updated to use the newer Python
    APIs until Python 3.10.
  * *Bugs Fixed**
  * Python 3.11 dropped ``inspect.formatargspec()`` which was used in creating
    signature changing decorators. Now bundling a version of this function
    which uses ``Parameter`` and ``Signature`` from ``inspect`` module when
    available. The replacement function is exposed as ``wrapt.formatargspec()``
    if need it for your own code.
  * When using a decorator on a class, ``isinstance()`` checks wouldn't previously
    work as expected and you had to manually use ``Type.__wrapped__`` to access
    the real type when doing instance checks. The ``__instancecheck__`` hook is
    now implemented such that you don't have to use ``Type.__wrapped__`` instead
    of ``Type`` as last argument to ``isinstance()``.
  * Eliminated deprecation warnings related to Python module import system, which
    would have turned into broken code in Python 3.12. This was used by the post
    import hook mechanism.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 1.15.0:
  * When the C extension for wrapt was being used, and a property
    was used on an object proxy wrapping another object to intercept
    access to an attribute of the same name on the wrapped object,
    if the function implementing the property
    raised an exception, then the exception was ignored and not
    propagated back to the caller.
  * Address issue where the post import hook mechanism of wrapt
    wasn't transparent and left the __loader__ and __spec__.loader
    attributes of a module as the wrapt import hook loader and
    not the original loader.
  * Address issues where a thread deadlock could occur within the
    wrapt module import handler, when code executed from a post
    import hook created a new thread and code executed in the
    context of the new thread itself tried to register a post
    import hook, or imported a new module.
  * When using ``CallableObjectProxy`` as a wrapper for a type or
    function and calling the wrapped object, it was not possible
    to pass a keyword argument named ``self``.</changelog>
</package>
<package pkgid="b339cc85917be5a5522bb6f9027ca3585d8aa872bb90690db0f939fb7154d5a9" name="python311-wrapt" arch="s390x">
  <version epoch="0" ver="1.15.0" rel="150400.12.7.1"/>
  <changelog author="hpj@urpla.net" date="1415102400">- version 1.9: initial build</changelog>
  <changelog author="michael@stroeder.com" date="1455624000">- update to 1.10.6</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version 1.10.8
  * Increment version to 1.10.8.
  * Fix modulo operator on ObjectProxy
  * Increment version to 1.10.7.
  * Document mod operator bug in Python variant of object proxy.
  * Update copyright year.
  * Fix tests for floordiv and mod.
  * Remove reference to inspect.getargspec() as removed in Python 3.6. #64
- Use pypi.io as Source url</changelog>
  <changelog author="jmatejek@suse.com" date="1488196800">- update for singlespec</changelog>
  <changelog author="adrian@suse.de" date="1499601600">- update to version 1.10.10:
  * Added back missing description and categorisations when releasing
  to PyPi.
  * Code for inspect.getargspec() when using Python 2.6 was missing
  import of sys module.</changelog>
  <changelog author="tchvatal@suse.com" date="1552305600">- Update to 1.11.1:
  * Many bugfixes all around
  * see changes.rst for detailed list
- Switch to github to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.11.2:
  * Fix possible crash when garbage collection kicks in when invoking a destructor of wrapped object.</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 1.12.0:
  * Provided that you only want to support Python 3.7, when deriving from
    a base class which has a decorator applied to it, you no longer need
    to access the true type of the base class using ``__wrapped__`` in
    the inherited class list of the derived class.
  * When using the ``synchronized`` decorator on instance methods of a
    class, if the class declared special methods to override the result for
    when the class instance was tested as a boolean so that it returned
    ``False`` all the time, the synchronized method would fail when called.
  * When using an adapter function to change the signature of the decorated
    function, ``inspect.signature()`` was returning the wrong signature
    when an instance method was inspected by accessing the method via the
    class type.</changelog>
  <changelog author="dmueller@suse.com" date="1584360000">- update to 1.12.1:
  * Applying a function wrapper to a static method of a class using the
  ``wrap_function_wrapper()`` function, or wrapper for the same, wasn't
  being done correctly when the static method was the immediate child of
  the target object. It was working when the name path had multiple name
  components. A failure would subsequently occur when the static method
  was called via an instance of the class, rather than the class.</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- Fix python3.6 build with pytest 6
  * fix-dummy-collector-pytest6.patch
  * gh#GrahamDumpleton/wrapt#168</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Fix python39 test suite failures
  * wrapt-pr161-py39tests.patch
  * gh#GrahamDumpleton/wrapt#161</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 1.13.2:
  * Note that the next signficant release of `wrapt` will drop support for
    Python 2.7 and Python 3.5.
  * Fix Python version constraint so PyPi classifier for ``pip`` requires
    Python 2.7 or Python 3.5+.
  * When a reference to a class method was taken out of a class, and then
    wrapped in a function wrapper, and called, the class type was not being
    passed as the instance argument, but as the first argument in args,
    with the instance being ``None``. The class type should have been passed
    as the instance argument.
  * If supplying an adapter function for a signature changing decorator
    using input in the form of a function argument specification, name lookup
    exceptions would occur where the adaptor function had annotations which
    referenced non builtin Python types. Although the issues have been
    addressed where using input data in the format usually returned by
    ``inspect.getfullargspec()`` to pass the function argument specification,
    you can still have problems when supplying a function signature as
    string. In the latter case only Python builtin types can be referenced
    in annotations.
  * When a decorator was applied on top of a data/non-data descriptor in a
    class definition, the call to the special method ``__set_name__()`` to
    notify the descriptor of the variable name was not being propogated. Note
    that this issue has been addressed in the ``FunctionWrapper`` used by
    ``@wrapt.decorator`` but has not been applied to the generic
    ``ObjectProxy`` class. If using ``ObjectProxy`` directly to construct a
    custom wrapper which is applied to a descriptor, you will need to
    propogate the ``__set_name__()`` call yourself if required.
  * The ``issubclass()`` builtin method would give incorrect results when used
    with a class which had a decorator applied to it. Note that this has only
    been able to be fixed for Python 3.7+. Also, due to what is arguably a
    bug (https://bugs.python.org/issue44847) in the Python standard library,
    you will still have problems when the class heirarchy uses a base class
    which has the ``abc.ABCMeta`` metaclass. In this later case an exception
    will be raised of ``TypeError: issubclass() arg 1 must be a class``.
- drop fix-dummy-collector-pytest6.patch, wrapt-pr161-py39tests.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.13.3:
  * Adds wheels for Python 3.10 on PyPi and where possible also now
  generating binary wheels for ``musllinux``.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.14.1:
  * When the post import hooks mechanism was being used, and a Python package with
    its own custom module importer was used, importing modules could fail if the
    custom module importer didn't use the latest Python import hook finder/loader
    APIs and instead used the deprecated API. This was actually occurring with the
    `zipimporter` in Python itself, which was not updated to use the newer Python
    APIs until Python 3.10.
  * *Bugs Fixed**
  * Python 3.11 dropped ``inspect.formatargspec()`` which was used in creating
    signature changing decorators. Now bundling a version of this function
    which uses ``Parameter`` and ``Signature`` from ``inspect`` module when
    available. The replacement function is exposed as ``wrapt.formatargspec()``
    if need it for your own code.
  * When using a decorator on a class, ``isinstance()`` checks wouldn't previously
    work as expected and you had to manually use ``Type.__wrapped__`` to access
    the real type when doing instance checks. The ``__instancecheck__`` hook is
    now implemented such that you don't have to use ``Type.__wrapped__`` instead
    of ``Type`` as last argument to ``isinstance()``.
  * Eliminated deprecation warnings related to Python module import system, which
    would have turned into broken code in Python 3.12. This was used by the post
    import hook mechanism.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 1.15.0:
  * When the C extension for wrapt was being used, and a property
    was used on an object proxy wrapping another object to intercept
    access to an attribute of the same name on the wrapped object,
    if the function implementing the property
    raised an exception, then the exception was ignored and not
    propagated back to the caller.
  * Address issue where the post import hook mechanism of wrapt
    wasn't transparent and left the __loader__ and __spec__.loader
    attributes of a module as the wrapt import hook loader and
    not the original loader.
  * Address issues where a thread deadlock could occur within the
    wrapt module import handler, when code executed from a post
    import hook created a new thread and code executed in the
    context of the new thread itself tried to register a post
    import hook, or imported a new module.
  * When using ``CallableObjectProxy`` as a wrapper for a type or
    function and calling the wrapped object, it was not possible
    to pass a keyword argument named ``self``.</changelog>
</package>
<package pkgid="4c30db2a1a75a998be82d13a8e5c32572c1a1bfa6f998c2bec9ca88b513b0c80" name="python311-wrapt" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="150400.12.7.1"/>
  <changelog author="hpj@urpla.net" date="1415102400">- version 1.9: initial build</changelog>
  <changelog author="michael@stroeder.com" date="1455624000">- update to 1.10.6</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version 1.10.8
  * Increment version to 1.10.8.
  * Fix modulo operator on ObjectProxy
  * Increment version to 1.10.7.
  * Document mod operator bug in Python variant of object proxy.
  * Update copyright year.
  * Fix tests for floordiv and mod.
  * Remove reference to inspect.getargspec() as removed in Python 3.6. #64
- Use pypi.io as Source url</changelog>
  <changelog author="jmatejek@suse.com" date="1488196800">- update for singlespec</changelog>
  <changelog author="adrian@suse.de" date="1499601600">- update to version 1.10.10:
  * Added back missing description and categorisations when releasing
  to PyPi.
  * Code for inspect.getargspec() when using Python 2.6 was missing
  import of sys module.</changelog>
  <changelog author="tchvatal@suse.com" date="1552305600">- Update to 1.11.1:
  * Many bugfixes all around
  * see changes.rst for detailed list
- Switch to github to include tests</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Update to 1.11.2:
  * Fix possible crash when garbage collection kicks in when invoking a destructor of wrapped object.</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to 1.12.0:
  * Provided that you only want to support Python 3.7, when deriving from
    a base class which has a decorator applied to it, you no longer need
    to access the true type of the base class using ``__wrapped__`` in
    the inherited class list of the derived class.
  * When using the ``synchronized`` decorator on instance methods of a
    class, if the class declared special methods to override the result for
    when the class instance was tested as a boolean so that it returned
    ``False`` all the time, the synchronized method would fail when called.
  * When using an adapter function to change the signature of the decorated
    function, ``inspect.signature()`` was returning the wrong signature
    when an instance method was inspected by accessing the method via the
    class type.</changelog>
  <changelog author="dmueller@suse.com" date="1584360000">- update to 1.12.1:
  * Applying a function wrapper to a static method of a class using the
  ``wrap_function_wrapper()`` function, or wrapper for the same, wasn't
  being done correctly when the static method was the immediate child of
  the target object. It was working when the name path had multiple name
  components. A failure would subsequently occur when the static method
  was called via an instance of the class, rather than the class.</changelog>
  <changelog author="code@bnavigator.de" date="1607083200">- Fix python3.6 build with pytest 6
  * fix-dummy-collector-pytest6.patch
  * gh#GrahamDumpleton/wrapt#168</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Fix python39 test suite failures
  * wrapt-pr161-py39tests.patch
  * gh#GrahamDumpleton/wrapt#161</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 1.13.2:
  * Note that the next signficant release of `wrapt` will drop support for
    Python 2.7 and Python 3.5.
  * Fix Python version constraint so PyPi classifier for ``pip`` requires
    Python 2.7 or Python 3.5+.
  * When a reference to a class method was taken out of a class, and then
    wrapped in a function wrapper, and called, the class type was not being
    passed as the instance argument, but as the first argument in args,
    with the instance being ``None``. The class type should have been passed
    as the instance argument.
  * If supplying an adapter function for a signature changing decorator
    using input in the form of a function argument specification, name lookup
    exceptions would occur where the adaptor function had annotations which
    referenced non builtin Python types. Although the issues have been
    addressed where using input data in the format usually returned by
    ``inspect.getfullargspec()`` to pass the function argument specification,
    you can still have problems when supplying a function signature as
    string. In the latter case only Python builtin types can be referenced
    in annotations.
  * When a decorator was applied on top of a data/non-data descriptor in a
    class definition, the call to the special method ``__set_name__()`` to
    notify the descriptor of the variable name was not being propogated. Note
    that this issue has been addressed in the ``FunctionWrapper`` used by
    ``@wrapt.decorator`` but has not been applied to the generic
    ``ObjectProxy`` class. If using ``ObjectProxy`` directly to construct a
    custom wrapper which is applied to a descriptor, you will need to
    propogate the ``__set_name__()`` call yourself if required.
  * The ``issubclass()`` builtin method would give incorrect results when used
    with a class which had a decorator applied to it. Note that this has only
    been able to be fixed for Python 3.7+. Also, due to what is arguably a
    bug (https://bugs.python.org/issue44847) in the Python standard library,
    you will still have problems when the class heirarchy uses a base class
    which has the ``abc.ABCMeta`` metaclass. In this later case an exception
    will be raised of ``TypeError: issubclass() arg 1 must be a class``.
- drop fix-dummy-collector-pytest6.patch, wrapt-pr161-py39tests.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 1.13.3:
  * Adds wheels for Python 3.10 on PyPi and where possible also now
  generating binary wheels for ``musllinux``.</changelog>
  <changelog author="dmueller@suse.com" date="1664625600">- update to 1.14.1:
  * When the post import hooks mechanism was being used, and a Python package with
    its own custom module importer was used, importing modules could fail if the
    custom module importer didn't use the latest Python import hook finder/loader
    APIs and instead used the deprecated API. This was actually occurring with the
    `zipimporter` in Python itself, which was not updated to use the newer Python
    APIs until Python 3.10.
  * *Bugs Fixed**
  * Python 3.11 dropped ``inspect.formatargspec()`` which was used in creating
    signature changing decorators. Now bundling a version of this function
    which uses ``Parameter`` and ``Signature`` from ``inspect`` module when
    available. The replacement function is exposed as ``wrapt.formatargspec()``
    if need it for your own code.
  * When using a decorator on a class, ``isinstance()`` checks wouldn't previously
    work as expected and you had to manually use ``Type.__wrapped__`` to access
    the real type when doing instance checks. The ``__instancecheck__`` hook is
    now implemented such that you don't have to use ``Type.__wrapped__`` instead
    of ``Type`` as last argument to ``isinstance()``.
  * Eliminated deprecation warnings related to Python module import system, which
    would have turned into broken code in Python 3.12. This was used by the post
    import hook mechanism.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 1.15.0:
  * When the C extension for wrapt was being used, and a property
    was used on an object proxy wrapping another object to intercept
    access to an attribute of the same name on the wrapped object,
    if the function implementing the property
    raised an exception, then the exception was ignored and not
    propagated back to the caller.
  * Address issue where the post import hook mechanism of wrapt
    wasn't transparent and left the __loader__ and __spec__.loader
    attributes of a module as the wrapt import hook loader and
    not the original loader.
  * Address issues where a thread deadlock could occur within the
    wrapt module import handler, when code executed from a post
    import hook created a new thread and code executed in the
    context of the new thread itself tried to register a post
    import hook, or imported a new module.
  * When using ``CallableObjectProxy`` as a wrapper for a type or
    function and calling the wrapped object, it was not possible
    to pass a keyword argument named ``self``.</changelog>
</package>
<package pkgid="6e9453b4badeb8a0fde078037c6882f3bd5ff0f4c9d1f5b002455cf36f09af57" name="python311-yarl" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="150400.8.7.4"/>
  <changelog author="arun@gmx.de" date="1519473600">- update to version 1.1.1:
  * Fix performance regression: don’t encode enmpty netloc (#170)</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Raise multidict requirement to match up setup.py</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551614400">- update to 1.3.0
  * Fix annotations for query parameter
  * An incoming query sequence can have int variables
  * Add URL.explicit_port property
  * Give a friendlier error when port cant be converted to int
  * bool(URL()) now returns False
  * Fix annotations for build
  * Fix annotations for cached_property
  * Accept str subclasses in URL constructor
  * Forbid inheritance, replace __init__ with __new__
  * Support PEP-561 (provide type hinting marker)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580731200">- update to 1.4.2
  * Workaround for missing str.isascii() in Python 3.6
  * Distinguish an empty password in URL from a password not provided at all
  * Fixed annotations for optional parameters of URL.build
  * Use None as default value of user parameter of URL.build
  * Enforce building C Accelerated modules when installing from source tarball,
    use YARL_NO_EXTENSIONS environment variable for falling back to (slower)
    Pure Python implementation
  * Fix quoting of plus in path by pure python version
  * Don't create a new URL if fragment is unchanged
  * Included in error msg the path that produces starting slash forbidden error
  * Skip slow IDNA encoding for ASCII-only strings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 1.5.0
- fix tests
  * Convert host to lowercase on URL building. #386
  * Allow using mod operator (%) for updating query string (an alias for update_query() method)
  * Allow use of sequences such as list and tuple in the values of a mapping
  such as dict to represent that a key has many values:
    url = URL("http://example.com")
    assert url.with_query({"a": [1, 2]}) == URL("http://example.com/?a=1&amp;a=2")
  * Support URL.build() with scheme and path (creates a relative URL)
  * Cache slow IDNA encode/decode calls
  * Add @final / Final type hints
  * Support URL authority/raw_authority properties and authority argument
  of URL.build() method
  * Hide the library implementation details, make the exposed public list very clean
  * Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+)
  * Fix a bug where query component, passed in a form of mapping or sequence,
  is unquoted in unexpected way
  * Hide Query and QueryVariable type aliases in __init__.pyi, now they
  are prefixed with underscore.
  * Keep ipv6 brackets after updating port/user/password.</changelog>
  <changelog author="code@bnavigator.de" date="1595937601">- remove c source file from package (rpmlint error)
- needs typing-extensions</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.6.0:
  - Allow for int and float subclasses in query, while still denying bool.
    `#492 &lt;https://github.com/aio-libs/yarl/issues/492&gt;`_
  - Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.
    `#502 &lt;https://github.com/aio-libs/yarl/issues/502&gt;`_
  - Keep IPv6 brackets in ``origin()``.
    `#504 &lt;https://github.com/aio-libs/yarl/issues/504&gt;`_</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.6.3:
  - No longer loose characters when decoding incorrect percent-sequences (like
    ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
  - Provide generated ``.c`` files in TarBall distribution.
  - ``human_repr()`` now always produces valid representation equivalent to the
    original URL (if the original URL is valid).
  - Fixed  requoting a single percent followed by a percent-encoded character
    in the Cython implementation.
  - Fix ValueError when decoding ``%`` which is not followed by two hexadecimal
    digits.
  - Fix decoding ``%`` followed by a space and hexadecimal digit.
  - Fix annotation of ``with_query()``/``update_query()`` methods for
    ``key=[val1, val2]`` case.</changelog>
  <changelog author="mcepl@suse.com" date="1614081600">- Add tests_overcome_bpo42967.patch to over effects of bpo#42967,
  which forbade mixing amps and semicolons in query strings as
  separators.</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Unset -Werror=return-type for python39
- Only install typing_extensions for Python &lt; 3.8</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- version update to 1.7.2
  - Changed call in ``with_port()`` to stop reencoding parts of the URL
  that were already encoded. (`#623 &lt;https://github.com/aio-libs/yarl/issues/623&gt;`_)
  - Add `__bytes__()` magic method so that `bytes(url)` will work and use optimal
  ASCII encoding. (`#582 &lt;https://github.com/aio-libs/yarl/issues/582&gt;`_)
  - Started shipping platform-specific arm64 wheels for Apple Silicon.
  (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Started shipping platform-specific wheels with the ``musl`` tag targeting typical
  Alpine Linux runtimes. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Added support for Python 3.10. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
- do not require pytest-runner for build, it is not needed</changelog>
  <changelog author="code@bnavigator.de" date="1660824000">- Update to 1.8.1
  * Added URL.raw_suffix, URL.suffix, URL.raw_suffixes,
    URL.suffixes, URL.with_suffix. (#613)
  * Dropped Python 3.6 support. (#672)
- Drop tests_overcome_bpo42967.patch</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.8.2
  * This is the first release that started shipping wheels for Python 3.11.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1673265600">- Add patch support-python-311.patch:
  * Skip a test under Python 3.11.</changelog>
  <changelog author="mcepl@suse.com" date="1677758400">- Refreshed support-python-311.patch: with fix
  of CVE-2023-24329 (bsc#1208471), the test
  test_url_parsing.TestScheme.test_not_a_scheme2 fails on all
  openSUSE/SLE Python interpreters.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to version 1.9.1
  * Marked tests that fail on older Python patch releases
  (&lt; 3.7.10, &lt; 3.8.8 and &lt; 3.9.2) as expected to fail due to missing
    a security fix for CVE-2021-23336. ((#850)_)
- Delete support-python-311.patch, not needed anymore</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Update to version 1.9.2
  Fix regression with truediv and absolute URLs with empty paths
  causing the raw path to lack the leading /. ((#854)_)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Add 882-sq_bracket_in_URL_netloc.patch fixing handling of
  square bracket handling in URL netloc (gh#aio-libs/yarl#876).</changelog>
</package>
<package pkgid="55d06dda2c4d4ea8a8d2bb05bc108fe5950faad8920fcc78989a8a9a03023802" name="python311-yarl" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="150400.8.7.4"/>
  <changelog author="arun@gmx.de" date="1519473600">- update to version 1.1.1:
  * Fix performance regression: don’t encode enmpty netloc (#170)</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Raise multidict requirement to match up setup.py</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551614400">- update to 1.3.0
  * Fix annotations for query parameter
  * An incoming query sequence can have int variables
  * Add URL.explicit_port property
  * Give a friendlier error when port cant be converted to int
  * bool(URL()) now returns False
  * Fix annotations for build
  * Fix annotations for cached_property
  * Accept str subclasses in URL constructor
  * Forbid inheritance, replace __init__ with __new__
  * Support PEP-561 (provide type hinting marker)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580731200">- update to 1.4.2
  * Workaround for missing str.isascii() in Python 3.6
  * Distinguish an empty password in URL from a password not provided at all
  * Fixed annotations for optional parameters of URL.build
  * Use None as default value of user parameter of URL.build
  * Enforce building C Accelerated modules when installing from source tarball,
    use YARL_NO_EXTENSIONS environment variable for falling back to (slower)
    Pure Python implementation
  * Fix quoting of plus in path by pure python version
  * Don't create a new URL if fragment is unchanged
  * Included in error msg the path that produces starting slash forbidden error
  * Skip slow IDNA encoding for ASCII-only strings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 1.5.0
- fix tests
  * Convert host to lowercase on URL building. #386
  * Allow using mod operator (%) for updating query string (an alias for update_query() method)
  * Allow use of sequences such as list and tuple in the values of a mapping
  such as dict to represent that a key has many values:
    url = URL("http://example.com")
    assert url.with_query({"a": [1, 2]}) == URL("http://example.com/?a=1&amp;a=2")
  * Support URL.build() with scheme and path (creates a relative URL)
  * Cache slow IDNA encode/decode calls
  * Add @final / Final type hints
  * Support URL authority/raw_authority properties and authority argument
  of URL.build() method
  * Hide the library implementation details, make the exposed public list very clean
  * Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+)
  * Fix a bug where query component, passed in a form of mapping or sequence,
  is unquoted in unexpected way
  * Hide Query and QueryVariable type aliases in __init__.pyi, now they
  are prefixed with underscore.
  * Keep ipv6 brackets after updating port/user/password.</changelog>
  <changelog author="code@bnavigator.de" date="1595937601">- remove c source file from package (rpmlint error)
- needs typing-extensions</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.6.0:
  - Allow for int and float subclasses in query, while still denying bool.
    `#492 &lt;https://github.com/aio-libs/yarl/issues/492&gt;`_
  - Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.
    `#502 &lt;https://github.com/aio-libs/yarl/issues/502&gt;`_
  - Keep IPv6 brackets in ``origin()``.
    `#504 &lt;https://github.com/aio-libs/yarl/issues/504&gt;`_</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.6.3:
  - No longer loose characters when decoding incorrect percent-sequences (like
    ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
  - Provide generated ``.c`` files in TarBall distribution.
  - ``human_repr()`` now always produces valid representation equivalent to the
    original URL (if the original URL is valid).
  - Fixed  requoting a single percent followed by a percent-encoded character
    in the Cython implementation.
  - Fix ValueError when decoding ``%`` which is not followed by two hexadecimal
    digits.
  - Fix decoding ``%`` followed by a space and hexadecimal digit.
  - Fix annotation of ``with_query()``/``update_query()`` methods for
    ``key=[val1, val2]`` case.</changelog>
  <changelog author="mcepl@suse.com" date="1614081600">- Add tests_overcome_bpo42967.patch to over effects of bpo#42967,
  which forbade mixing amps and semicolons in query strings as
  separators.</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Unset -Werror=return-type for python39
- Only install typing_extensions for Python &lt; 3.8</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- version update to 1.7.2
  - Changed call in ``with_port()`` to stop reencoding parts of the URL
  that were already encoded. (`#623 &lt;https://github.com/aio-libs/yarl/issues/623&gt;`_)
  - Add `__bytes__()` magic method so that `bytes(url)` will work and use optimal
  ASCII encoding. (`#582 &lt;https://github.com/aio-libs/yarl/issues/582&gt;`_)
  - Started shipping platform-specific arm64 wheels for Apple Silicon.
  (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Started shipping platform-specific wheels with the ``musl`` tag targeting typical
  Alpine Linux runtimes. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Added support for Python 3.10. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
- do not require pytest-runner for build, it is not needed</changelog>
  <changelog author="code@bnavigator.de" date="1660824000">- Update to 1.8.1
  * Added URL.raw_suffix, URL.suffix, URL.raw_suffixes,
    URL.suffixes, URL.with_suffix. (#613)
  * Dropped Python 3.6 support. (#672)
- Drop tests_overcome_bpo42967.patch</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.8.2
  * This is the first release that started shipping wheels for Python 3.11.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1673265600">- Add patch support-python-311.patch:
  * Skip a test under Python 3.11.</changelog>
  <changelog author="mcepl@suse.com" date="1677758400">- Refreshed support-python-311.patch: with fix
  of CVE-2023-24329 (bsc#1208471), the test
  test_url_parsing.TestScheme.test_not_a_scheme2 fails on all
  openSUSE/SLE Python interpreters.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to version 1.9.1
  * Marked tests that fail on older Python patch releases
  (&lt; 3.7.10, &lt; 3.8.8 and &lt; 3.9.2) as expected to fail due to missing
    a security fix for CVE-2021-23336. ((#850)_)
- Delete support-python-311.patch, not needed anymore</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Update to version 1.9.2
  Fix regression with truediv and absolute URLs with empty paths
  causing the raw path to lack the leading /. ((#854)_)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Add 882-sq_bracket_in_URL_netloc.patch fixing handling of
  square bracket handling in URL netloc (gh#aio-libs/yarl#876).</changelog>
</package>
<package pkgid="768616c719beb8b88386d7c90fbb77eda06be0575a38b610f3088056b0503385" name="python311-yarl" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="150400.8.7.4"/>
  <changelog author="arun@gmx.de" date="1519473600">- update to version 1.1.1:
  * Fix performance regression: don’t encode enmpty netloc (#170)</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Raise multidict requirement to match up setup.py</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551614400">- update to 1.3.0
  * Fix annotations for query parameter
  * An incoming query sequence can have int variables
  * Add URL.explicit_port property
  * Give a friendlier error when port cant be converted to int
  * bool(URL()) now returns False
  * Fix annotations for build
  * Fix annotations for cached_property
  * Accept str subclasses in URL constructor
  * Forbid inheritance, replace __init__ with __new__
  * Support PEP-561 (provide type hinting marker)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580731200">- update to 1.4.2
  * Workaround for missing str.isascii() in Python 3.6
  * Distinguish an empty password in URL from a password not provided at all
  * Fixed annotations for optional parameters of URL.build
  * Use None as default value of user parameter of URL.build
  * Enforce building C Accelerated modules when installing from source tarball,
    use YARL_NO_EXTENSIONS environment variable for falling back to (slower)
    Pure Python implementation
  * Fix quoting of plus in path by pure python version
  * Don't create a new URL if fragment is unchanged
  * Included in error msg the path that produces starting slash forbidden error
  * Skip slow IDNA encoding for ASCII-only strings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 1.5.0
- fix tests
  * Convert host to lowercase on URL building. #386
  * Allow using mod operator (%) for updating query string (an alias for update_query() method)
  * Allow use of sequences such as list and tuple in the values of a mapping
  such as dict to represent that a key has many values:
    url = URL("http://example.com")
    assert url.with_query({"a": [1, 2]}) == URL("http://example.com/?a=1&amp;a=2")
  * Support URL.build() with scheme and path (creates a relative URL)
  * Cache slow IDNA encode/decode calls
  * Add @final / Final type hints
  * Support URL authority/raw_authority properties and authority argument
  of URL.build() method
  * Hide the library implementation details, make the exposed public list very clean
  * Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+)
  * Fix a bug where query component, passed in a form of mapping or sequence,
  is unquoted in unexpected way
  * Hide Query and QueryVariable type aliases in __init__.pyi, now they
  are prefixed with underscore.
  * Keep ipv6 brackets after updating port/user/password.</changelog>
  <changelog author="code@bnavigator.de" date="1595937601">- remove c source file from package (rpmlint error)
- needs typing-extensions</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.6.0:
  - Allow for int and float subclasses in query, while still denying bool.
    `#492 &lt;https://github.com/aio-libs/yarl/issues/492&gt;`_
  - Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.
    `#502 &lt;https://github.com/aio-libs/yarl/issues/502&gt;`_
  - Keep IPv6 brackets in ``origin()``.
    `#504 &lt;https://github.com/aio-libs/yarl/issues/504&gt;`_</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.6.3:
  - No longer loose characters when decoding incorrect percent-sequences (like
    ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
  - Provide generated ``.c`` files in TarBall distribution.
  - ``human_repr()`` now always produces valid representation equivalent to the
    original URL (if the original URL is valid).
  - Fixed  requoting a single percent followed by a percent-encoded character
    in the Cython implementation.
  - Fix ValueError when decoding ``%`` which is not followed by two hexadecimal
    digits.
  - Fix decoding ``%`` followed by a space and hexadecimal digit.
  - Fix annotation of ``with_query()``/``update_query()`` methods for
    ``key=[val1, val2]`` case.</changelog>
  <changelog author="mcepl@suse.com" date="1614081600">- Add tests_overcome_bpo42967.patch to over effects of bpo#42967,
  which forbade mixing amps and semicolons in query strings as
  separators.</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Unset -Werror=return-type for python39
- Only install typing_extensions for Python &lt; 3.8</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- version update to 1.7.2
  - Changed call in ``with_port()`` to stop reencoding parts of the URL
  that were already encoded. (`#623 &lt;https://github.com/aio-libs/yarl/issues/623&gt;`_)
  - Add `__bytes__()` magic method so that `bytes(url)` will work and use optimal
  ASCII encoding. (`#582 &lt;https://github.com/aio-libs/yarl/issues/582&gt;`_)
  - Started shipping platform-specific arm64 wheels for Apple Silicon.
  (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Started shipping platform-specific wheels with the ``musl`` tag targeting typical
  Alpine Linux runtimes. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Added support for Python 3.10. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
- do not require pytest-runner for build, it is not needed</changelog>
  <changelog author="code@bnavigator.de" date="1660824000">- Update to 1.8.1
  * Added URL.raw_suffix, URL.suffix, URL.raw_suffixes,
    URL.suffixes, URL.with_suffix. (#613)
  * Dropped Python 3.6 support. (#672)
- Drop tests_overcome_bpo42967.patch</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.8.2
  * This is the first release that started shipping wheels for Python 3.11.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1673265600">- Add patch support-python-311.patch:
  * Skip a test under Python 3.11.</changelog>
  <changelog author="mcepl@suse.com" date="1677758400">- Refreshed support-python-311.patch: with fix
  of CVE-2023-24329 (bsc#1208471), the test
  test_url_parsing.TestScheme.test_not_a_scheme2 fails on all
  openSUSE/SLE Python interpreters.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to version 1.9.1
  * Marked tests that fail on older Python patch releases
  (&lt; 3.7.10, &lt; 3.8.8 and &lt; 3.9.2) as expected to fail due to missing
    a security fix for CVE-2021-23336. ((#850)_)
- Delete support-python-311.patch, not needed anymore</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Update to version 1.9.2
  Fix regression with truediv and absolute URLs with empty paths
  causing the raw path to lack the leading /. ((#854)_)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Add 882-sq_bracket_in_URL_netloc.patch fixing handling of
  square bracket handling in URL netloc (gh#aio-libs/yarl#876).</changelog>
</package>
<package pkgid="b876b7c298748c476152b52b3328c4e66cfcb60600ec0f859aed4ff0b5fb2f9f" name="python311-yarl" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="150400.8.7.4"/>
  <changelog author="arun@gmx.de" date="1519473600">- update to version 1.1.1:
  * Fix performance regression: don’t encode enmpty netloc (#170)</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Raise multidict requirement to match up setup.py</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551614400">- update to 1.3.0
  * Fix annotations for query parameter
  * An incoming query sequence can have int variables
  * Add URL.explicit_port property
  * Give a friendlier error when port cant be converted to int
  * bool(URL()) now returns False
  * Fix annotations for build
  * Fix annotations for cached_property
  * Accept str subclasses in URL constructor
  * Forbid inheritance, replace __init__ with __new__
  * Support PEP-561 (provide type hinting marker)</changelog>
  <changelog author="mcalabkova@suse.com" date="1580731200">- update to 1.4.2
  * Workaround for missing str.isascii() in Python 3.6
  * Distinguish an empty password in URL from a password not provided at all
  * Fixed annotations for optional parameters of URL.build
  * Use None as default value of user parameter of URL.build
  * Enforce building C Accelerated modules when installing from source tarball,
    use YARL_NO_EXTENSIONS environment variable for falling back to (slower)
    Pure Python implementation
  * Fix quoting of plus in path by pure python version
  * Don't create a new URL if fragment is unchanged
  * Included in error msg the path that produces starting slash forbidden error
  * Skip slow IDNA encoding for ASCII-only strings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 1.5.0
- fix tests
  * Convert host to lowercase on URL building. #386
  * Allow using mod operator (%) for updating query string (an alias for update_query() method)
  * Allow use of sequences such as list and tuple in the values of a mapping
  such as dict to represent that a key has many values:
    url = URL("http://example.com")
    assert url.with_query({"a": [1, 2]}) == URL("http://example.com/?a=1&amp;a=2")
  * Support URL.build() with scheme and path (creates a relative URL)
  * Cache slow IDNA encode/decode calls
  * Add @final / Final type hints
  * Support URL authority/raw_authority properties and authority argument
  of URL.build() method
  * Hide the library implementation details, make the exposed public list very clean
  * Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+)
  * Fix a bug where query component, passed in a form of mapping or sequence,
  is unquoted in unexpected way
  * Hide Query and QueryVariable type aliases in __init__.pyi, now they
  are prefixed with underscore.
  * Keep ipv6 brackets after updating port/user/password.</changelog>
  <changelog author="code@bnavigator.de" date="1595937601">- remove c source file from package (rpmlint error)
- needs typing-extensions</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 1.6.0:
  - Allow for int and float subclasses in query, while still denying bool.
    `#492 &lt;https://github.com/aio-libs/yarl/issues/492&gt;`_
  - Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.
    `#502 &lt;https://github.com/aio-libs/yarl/issues/502&gt;`_
  - Keep IPv6 brackets in ``origin()``.
    `#504 &lt;https://github.com/aio-libs/yarl/issues/504&gt;`_</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 1.6.3:
  - No longer loose characters when decoding incorrect percent-sequences (like
    ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
  - Provide generated ``.c`` files in TarBall distribution.
  - ``human_repr()`` now always produces valid representation equivalent to the
    original URL (if the original URL is valid).
  - Fixed  requoting a single percent followed by a percent-encoded character
    in the Cython implementation.
  - Fix ValueError when decoding ``%`` which is not followed by two hexadecimal
    digits.
  - Fix decoding ``%`` followed by a space and hexadecimal digit.
  - Fix annotation of ``with_query()``/``update_query()`` methods for
    ``key=[val1, val2]`` case.</changelog>
  <changelog author="mcepl@suse.com" date="1614081600">- Add tests_overcome_bpo42967.patch to over effects of bpo#42967,
  which forbade mixing amps and semicolons in query strings as
  separators.</changelog>
  <changelog author="code@bnavigator.de" date="1616241600">- Unset -Werror=return-type for python39
- Only install typing_extensions for Python &lt; 3.8</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- version update to 1.7.2
  - Changed call in ``with_port()`` to stop reencoding parts of the URL
  that were already encoded. (`#623 &lt;https://github.com/aio-libs/yarl/issues/623&gt;`_)
  - Add `__bytes__()` magic method so that `bytes(url)` will work and use optimal
  ASCII encoding. (`#582 &lt;https://github.com/aio-libs/yarl/issues/582&gt;`_)
  - Started shipping platform-specific arm64 wheels for Apple Silicon.
  (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Started shipping platform-specific wheels with the ``musl`` tag targeting typical
  Alpine Linux runtimes. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
  - Added support for Python 3.10. (`#622 &lt;https://github.com/aio-libs/yarl/issues/622&gt;`_)
- do not require pytest-runner for build, it is not needed</changelog>
  <changelog author="code@bnavigator.de" date="1660824000">- Update to 1.8.1
  * Added URL.raw_suffix, URL.suffix, URL.raw_suffixes,
    URL.suffixes, URL.with_suffix. (#613)
  * Dropped Python 3.6 support. (#672)
- Drop tests_overcome_bpo42967.patch</changelog>
  <changelog author="yarunachalam@suse.com" date="1670414400">- Update to version 1.8.2
  * This is the first release that started shipping wheels for Python 3.11.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1673265600">- Add patch support-python-311.patch:
  * Skip a test under Python 3.11.</changelog>
  <changelog author="mcepl@suse.com" date="1677758400">- Refreshed support-python-311.patch: with fix
  of CVE-2023-24329 (bsc#1208471), the test
  test_url_parsing.TestScheme.test_not_a_scheme2 fails on all
  openSUSE/SLE Python interpreters.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to version 1.9.1
  * Marked tests that fail on older Python patch releases
  (&lt; 3.7.10, &lt; 3.8.8 and &lt; 3.9.2) as expected to fail due to missing
    a security fix for CVE-2021-23336. ((#850)_)
- Delete support-python-311.patch, not needed anymore</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682510400">- Update to version 1.9.2
  Fix regression with truediv and absolute URLs with empty paths
  causing the raw path to lack the leading /. ((#854)_)</changelog>
  <changelog author="mcepl@suse.com" date="1688472000">- Add 882-sq_bracket_in_URL_netloc.patch fixing handling of
  square bracket handling in URL netloc (gh#aio-libs/yarl#876).</changelog>
</package>
<package pkgid="0868043d88b37f5456a292b9cc98721640404acf954010b04845387c7e11c9c2" name="python311-zope.interface" arch="aarch64">
  <version epoch="0" ver="6.0" rel="150400.12.7.4"/>
  <changelog author="okurz@suse.com" date="1489233600">- Convert package to singlespec</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Update to 4.4.2
  * Fix a regression storing zope.component.persistentregistry.PersistentRegistry instances. See issue 85.
  * Fix a regression that could lead to the utility registration cache of Components getting out of sync. See issue 93.
- Update to 4.4.1
  * Simplify the caching of utility-registration data. In addition to simplification, avoids spurious test failures when checking for leaks in tests with persistent registries. See pull 84.
  * Raise ValueError when non-text names are passed to adapter registry methods: prevents corruption of lookup caches.
- Update to 4.4.0
  * Avoid a warning from the C compiler. (https://github.com/zopefoundation/zope.interface/issues/71)
  * Add support for Python 3.6.
- Update to 4.3.3
  * Correct typos and ReST formatting errors in documentation.
  * Add API documentation for the adapter registry.
  * Ensure that the LICENSE.txt file is included in built wheels.
  * Fix C optimizations broken on Py3k. See the Python bug at: http://bugs.python.org/issue15657 (https://github.com/zopefoundation/zope.interface/issues/60)
- Update to 4.3.2
  * Fix equality testing of implementedBy objects and proxies. (https://github.com/zopefoundation/zope.interface/issues/55)
- Prevent duplicate doc package generation
- Cleanup duplicates in build tree</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cover building python3 packages as well</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Version update to 4.5.0:
  * Allow registering and unregistering instance methods as listeners. See issue 12 and PR 102.
  * Synchronize and simplify zope/__init__.py. See issue 114
  * Avoid exceptions when the __annotations__ attribute is added to interface definitions with Python 3.x type hints. See issue 98.
  * Fix the possibility of a rare crash in the C extension when deallocating items. See issue 100.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcalabkova@suse.com" date="1554465600">- update to version 4.6.0
  * Add support for Python 3.7
  * Fix verifyObject for class objects with staticmethods on Python 3.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1575892800">- update to 4.7.1:
  * Use Python 3 syntax in the documentation. See issue 119.
  * Drop support for Python 3.4.
  * Fix queryTaggedValue, getTaggedValue, getTaggedValueTags subclass
    inheritance. See PR 144.
  * Add support for Python 3.8.</changelog>
  <changelog author="pgajdos@suse.com" date="1584360000">- version update to 4.7.2
  - Remove deprecated use of setuptools features.  See `issue 30
    &lt;https://github.com/zopefoundation/zope.interface/issues/30&gt;`_.</changelog>
  <changelog author="pgajdos@suse.com" date="1585051200">- version update to 5.0.1
  * lot of changes, see CHANGES.rst</changelog>
  <changelog author="tchvatal@suse.com" date="1586865600">- Update to 5.1.0:
  * Make @implementer(*iface) and classImplements(cls, *iface) ignore redundant interfaces. If the class already implements an interface through inheritance, it is no longer redeclared specifically for cls. This solves many instances of inconsistent resolution orders, while still allowing the interface to be declared for readability and maintenance purposes. See issue 199.
  * Remove all bare except: statements. Previously, when accessing special attributes such as __provides__, __providedBy__, __class__ and __conform__, this package wrapped such access in a bare except: statement, meaning that many errors could pass silently; typically this would result in a fallback path being taken and sometimes (like with providedBy()) the result would be non-sensical. This is especially true when those attributes are implemented with descriptors. Now, only AttributeError is caught. This makes errors more obvious.
  * In addition, ZODB errors like POSKeyError could now be propagated where previously they would ignored by this package.
  * Require that the second argument (bases) to InterfaceClass is a tuple. This only matters when directly using InterfaceClass to create new interfaces dynamically. Previously, an individual interface was allowed, but did not work correctly. Now it is consistent with type and requires a tuple.
  * Let interfaces define custom __adapt__ methods. This implements the other side of the PEP 246 adaptation protocol: objects being adapted could already implement __conform__ if they know about the interface, and now interfaces can implement __adapt__ if they know about particular objects. There is no performance penalty for interfaces that do not supply custom __adapt__ methods.
  * Make the internal singleton object returned by APIs like implementedBy and directlyProvidedBy for objects that implement or provide no interfaces more immutable. Previously an internal cache could be mutated. See issue 204.</changelog>
  <changelog author="asn@cryptomilk.org" date="1612353600">- Update to version 5.2.0
  * Add documentation section ``Persistency and Equality``
  * Create arm64 wheels.
  * Add support for Python 3.9.
- Fix build on tumbleweed</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Don't switch off python36 build, half of python-* packages depend on it.</changelog>
  <changelog author="os@jacraig.com" date="1625832000">- Update to 5.4.0
  * many changes, see CHANGES.rst</changelog>
  <changelog author="pgajdos@suse.com" date="1634126400">- %check: use %pyunittest rpm macro
- added sources
  + _multibuild</changelog>
  <changelog author="yarunachalam@suse.com" date="1667044800">- Update to version 5.5.0
  * Add support for Python 3.10 and 3.11 (as of 3.11.0rc2).
  * Add missing Trove classifier showing support for Python 3.9.
  * Add some more entries to zope.interface.interfaces.__all__.
  * Disable unsafe math optimizations in C code. See pull request 262.</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 5.5.1
  * Add support for final Python 3.11 release.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670241600">- Update to version 5.5.2
  * Add support for building arm64 wheels on macOS.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 6.0:
  * Build Linux binary wheels for Python 3.11.
  * Drop support for Python 2.7, 3.5, 3.6.
  * Fix test deprecation warning on Python 3.11.
  * Add preliminary support for Python 3.12 as of 3.12a5.
  * Drop:
  * + `zope.interface.implements`
  * + `zope.interface.implementsOnly`
  * + `zope.interface.classProvides`</changelog>
</package>
<package pkgid="42c7569c39dbcb38a07b48129d926b00c3513e613b880074c6cdd4ee4071e40c" name="python311-zope.interface" arch="ppc64le">
  <version epoch="0" ver="6.0" rel="150400.12.7.4"/>
  <changelog author="okurz@suse.com" date="1489233600">- Convert package to singlespec</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Update to 4.4.2
  * Fix a regression storing zope.component.persistentregistry.PersistentRegistry instances. See issue 85.
  * Fix a regression that could lead to the utility registration cache of Components getting out of sync. See issue 93.
- Update to 4.4.1
  * Simplify the caching of utility-registration data. In addition to simplification, avoids spurious test failures when checking for leaks in tests with persistent registries. See pull 84.
  * Raise ValueError when non-text names are passed to adapter registry methods: prevents corruption of lookup caches.
- Update to 4.4.0
  * Avoid a warning from the C compiler. (https://github.com/zopefoundation/zope.interface/issues/71)
  * Add support for Python 3.6.
- Update to 4.3.3
  * Correct typos and ReST formatting errors in documentation.
  * Add API documentation for the adapter registry.
  * Ensure that the LICENSE.txt file is included in built wheels.
  * Fix C optimizations broken on Py3k. See the Python bug at: http://bugs.python.org/issue15657 (https://github.com/zopefoundation/zope.interface/issues/60)
- Update to 4.3.2
  * Fix equality testing of implementedBy objects and proxies. (https://github.com/zopefoundation/zope.interface/issues/55)
- Prevent duplicate doc package generation
- Cleanup duplicates in build tree</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cover building python3 packages as well</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Version update to 4.5.0:
  * Allow registering and unregistering instance methods as listeners. See issue 12 and PR 102.
  * Synchronize and simplify zope/__init__.py. See issue 114
  * Avoid exceptions when the __annotations__ attribute is added to interface definitions with Python 3.x type hints. See issue 98.
  * Fix the possibility of a rare crash in the C extension when deallocating items. See issue 100.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcalabkova@suse.com" date="1554465600">- update to version 4.6.0
  * Add support for Python 3.7
  * Fix verifyObject for class objects with staticmethods on Python 3.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1575892800">- update to 4.7.1:
  * Use Python 3 syntax in the documentation. See issue 119.
  * Drop support for Python 3.4.
  * Fix queryTaggedValue, getTaggedValue, getTaggedValueTags subclass
    inheritance. See PR 144.
  * Add support for Python 3.8.</changelog>
  <changelog author="pgajdos@suse.com" date="1584360000">- version update to 4.7.2
  - Remove deprecated use of setuptools features.  See `issue 30
    &lt;https://github.com/zopefoundation/zope.interface/issues/30&gt;`_.</changelog>
  <changelog author="pgajdos@suse.com" date="1585051200">- version update to 5.0.1
  * lot of changes, see CHANGES.rst</changelog>
  <changelog author="tchvatal@suse.com" date="1586865600">- Update to 5.1.0:
  * Make @implementer(*iface) and classImplements(cls, *iface) ignore redundant interfaces. If the class already implements an interface through inheritance, it is no longer redeclared specifically for cls. This solves many instances of inconsistent resolution orders, while still allowing the interface to be declared for readability and maintenance purposes. See issue 199.
  * Remove all bare except: statements. Previously, when accessing special attributes such as __provides__, __providedBy__, __class__ and __conform__, this package wrapped such access in a bare except: statement, meaning that many errors could pass silently; typically this would result in a fallback path being taken and sometimes (like with providedBy()) the result would be non-sensical. This is especially true when those attributes are implemented with descriptors. Now, only AttributeError is caught. This makes errors more obvious.
  * In addition, ZODB errors like POSKeyError could now be propagated where previously they would ignored by this package.
  * Require that the second argument (bases) to InterfaceClass is a tuple. This only matters when directly using InterfaceClass to create new interfaces dynamically. Previously, an individual interface was allowed, but did not work correctly. Now it is consistent with type and requires a tuple.
  * Let interfaces define custom __adapt__ methods. This implements the other side of the PEP 246 adaptation protocol: objects being adapted could already implement __conform__ if they know about the interface, and now interfaces can implement __adapt__ if they know about particular objects. There is no performance penalty for interfaces that do not supply custom __adapt__ methods.
  * Make the internal singleton object returned by APIs like implementedBy and directlyProvidedBy for objects that implement or provide no interfaces more immutable. Previously an internal cache could be mutated. See issue 204.</changelog>
  <changelog author="asn@cryptomilk.org" date="1612353600">- Update to version 5.2.0
  * Add documentation section ``Persistency and Equality``
  * Create arm64 wheels.
  * Add support for Python 3.9.
- Fix build on tumbleweed</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Don't switch off python36 build, half of python-* packages depend on it.</changelog>
  <changelog author="os@jacraig.com" date="1625832000">- Update to 5.4.0
  * many changes, see CHANGES.rst</changelog>
  <changelog author="pgajdos@suse.com" date="1634126400">- %check: use %pyunittest rpm macro
- added sources
  + _multibuild</changelog>
  <changelog author="yarunachalam@suse.com" date="1667044800">- Update to version 5.5.0
  * Add support for Python 3.10 and 3.11 (as of 3.11.0rc2).
  * Add missing Trove classifier showing support for Python 3.9.
  * Add some more entries to zope.interface.interfaces.__all__.
  * Disable unsafe math optimizations in C code. See pull request 262.</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 5.5.1
  * Add support for final Python 3.11 release.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670241600">- Update to version 5.5.2
  * Add support for building arm64 wheels on macOS.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 6.0:
  * Build Linux binary wheels for Python 3.11.
  * Drop support for Python 2.7, 3.5, 3.6.
  * Fix test deprecation warning on Python 3.11.
  * Add preliminary support for Python 3.12 as of 3.12a5.
  * Drop:
  * + `zope.interface.implements`
  * + `zope.interface.implementsOnly`
  * + `zope.interface.classProvides`</changelog>
</package>
<package pkgid="90a4005dc6906c8628139765982da076cb421473df1a23a99d06192eeb507354" name="python311-zope.interface" arch="s390x">
  <version epoch="0" ver="6.0" rel="150400.12.7.4"/>
  <changelog author="okurz@suse.com" date="1489233600">- Convert package to singlespec</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Update to 4.4.2
  * Fix a regression storing zope.component.persistentregistry.PersistentRegistry instances. See issue 85.
  * Fix a regression that could lead to the utility registration cache of Components getting out of sync. See issue 93.
- Update to 4.4.1
  * Simplify the caching of utility-registration data. In addition to simplification, avoids spurious test failures when checking for leaks in tests with persistent registries. See pull 84.
  * Raise ValueError when non-text names are passed to adapter registry methods: prevents corruption of lookup caches.
- Update to 4.4.0
  * Avoid a warning from the C compiler. (https://github.com/zopefoundation/zope.interface/issues/71)
  * Add support for Python 3.6.
- Update to 4.3.3
  * Correct typos and ReST formatting errors in documentation.
  * Add API documentation for the adapter registry.
  * Ensure that the LICENSE.txt file is included in built wheels.
  * Fix C optimizations broken on Py3k. See the Python bug at: http://bugs.python.org/issue15657 (https://github.com/zopefoundation/zope.interface/issues/60)
- Update to 4.3.2
  * Fix equality testing of implementedBy objects and proxies. (https://github.com/zopefoundation/zope.interface/issues/55)
- Prevent duplicate doc package generation
- Cleanup duplicates in build tree</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cover building python3 packages as well</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Version update to 4.5.0:
  * Allow registering and unregistering instance methods as listeners. See issue 12 and PR 102.
  * Synchronize and simplify zope/__init__.py. See issue 114
  * Avoid exceptions when the __annotations__ attribute is added to interface definitions with Python 3.x type hints. See issue 98.
  * Fix the possibility of a rare crash in the C extension when deallocating items. See issue 100.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcalabkova@suse.com" date="1554465600">- update to version 4.6.0
  * Add support for Python 3.7
  * Fix verifyObject for class objects with staticmethods on Python 3.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1575892800">- update to 4.7.1:
  * Use Python 3 syntax in the documentation. See issue 119.
  * Drop support for Python 3.4.
  * Fix queryTaggedValue, getTaggedValue, getTaggedValueTags subclass
    inheritance. See PR 144.
  * Add support for Python 3.8.</changelog>
  <changelog author="pgajdos@suse.com" date="1584360000">- version update to 4.7.2
  - Remove deprecated use of setuptools features.  See `issue 30
    &lt;https://github.com/zopefoundation/zope.interface/issues/30&gt;`_.</changelog>
  <changelog author="pgajdos@suse.com" date="1585051200">- version update to 5.0.1
  * lot of changes, see CHANGES.rst</changelog>
  <changelog author="tchvatal@suse.com" date="1586865600">- Update to 5.1.0:
  * Make @implementer(*iface) and classImplements(cls, *iface) ignore redundant interfaces. If the class already implements an interface through inheritance, it is no longer redeclared specifically for cls. This solves many instances of inconsistent resolution orders, while still allowing the interface to be declared for readability and maintenance purposes. See issue 199.
  * Remove all bare except: statements. Previously, when accessing special attributes such as __provides__, __providedBy__, __class__ and __conform__, this package wrapped such access in a bare except: statement, meaning that many errors could pass silently; typically this would result in a fallback path being taken and sometimes (like with providedBy()) the result would be non-sensical. This is especially true when those attributes are implemented with descriptors. Now, only AttributeError is caught. This makes errors more obvious.
  * In addition, ZODB errors like POSKeyError could now be propagated where previously they would ignored by this package.
  * Require that the second argument (bases) to InterfaceClass is a tuple. This only matters when directly using InterfaceClass to create new interfaces dynamically. Previously, an individual interface was allowed, but did not work correctly. Now it is consistent with type and requires a tuple.
  * Let interfaces define custom __adapt__ methods. This implements the other side of the PEP 246 adaptation protocol: objects being adapted could already implement __conform__ if they know about the interface, and now interfaces can implement __adapt__ if they know about particular objects. There is no performance penalty for interfaces that do not supply custom __adapt__ methods.
  * Make the internal singleton object returned by APIs like implementedBy and directlyProvidedBy for objects that implement or provide no interfaces more immutable. Previously an internal cache could be mutated. See issue 204.</changelog>
  <changelog author="asn@cryptomilk.org" date="1612353600">- Update to version 5.2.0
  * Add documentation section ``Persistency and Equality``
  * Create arm64 wheels.
  * Add support for Python 3.9.
- Fix build on tumbleweed</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Don't switch off python36 build, half of python-* packages depend on it.</changelog>
  <changelog author="os@jacraig.com" date="1625832000">- Update to 5.4.0
  * many changes, see CHANGES.rst</changelog>
  <changelog author="pgajdos@suse.com" date="1634126400">- %check: use %pyunittest rpm macro
- added sources
  + _multibuild</changelog>
  <changelog author="yarunachalam@suse.com" date="1667044800">- Update to version 5.5.0
  * Add support for Python 3.10 and 3.11 (as of 3.11.0rc2).
  * Add missing Trove classifier showing support for Python 3.9.
  * Add some more entries to zope.interface.interfaces.__all__.
  * Disable unsafe math optimizations in C code. See pull request 262.</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 5.5.1
  * Add support for final Python 3.11 release.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670241600">- Update to version 5.5.2
  * Add support for building arm64 wheels on macOS.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 6.0:
  * Build Linux binary wheels for Python 3.11.
  * Drop support for Python 2.7, 3.5, 3.6.
  * Fix test deprecation warning on Python 3.11.
  * Add preliminary support for Python 3.12 as of 3.12a5.
  * Drop:
  * + `zope.interface.implements`
  * + `zope.interface.implementsOnly`
  * + `zope.interface.classProvides`</changelog>
</package>
<package pkgid="e09b263be87ff150e0475fb7b3adcb7e3981245f43fc49b3c53eb2ea778311df" name="python311-zope.interface" arch="x86_64">
  <version epoch="0" ver="6.0" rel="150400.12.7.4"/>
  <changelog author="okurz@suse.com" date="1489233600">- Convert package to singlespec</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Update to 4.4.2
  * Fix a regression storing zope.component.persistentregistry.PersistentRegistry instances. See issue 85.
  * Fix a regression that could lead to the utility registration cache of Components getting out of sync. See issue 93.
- Update to 4.4.1
  * Simplify the caching of utility-registration data. In addition to simplification, avoids spurious test failures when checking for leaks in tests with persistent registries. See pull 84.
  * Raise ValueError when non-text names are passed to adapter registry methods: prevents corruption of lookup caches.
- Update to 4.4.0
  * Avoid a warning from the C compiler. (https://github.com/zopefoundation/zope.interface/issues/71)
  * Add support for Python 3.6.
- Update to 4.3.3
  * Correct typos and ReST formatting errors in documentation.
  * Add API documentation for the adapter registry.
  * Ensure that the LICENSE.txt file is included in built wheels.
  * Fix C optimizations broken on Py3k. See the Python bug at: http://bugs.python.org/issue15657 (https://github.com/zopefoundation/zope.interface/issues/60)
- Update to 4.3.2
  * Fix equality testing of implementedBy objects and proxies. (https://github.com/zopefoundation/zope.interface/issues/55)
- Prevent duplicate doc package generation
- Cleanup duplicates in build tree</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cover building python3 packages as well</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Version update to 4.5.0:
  * Allow registering and unregistering instance methods as listeners. See issue 12 and PR 102.
  * Synchronize and simplify zope/__init__.py. See issue 114
  * Avoid exceptions when the __annotations__ attribute is added to interface definitions with Python 3.x type hints. See issue 98.
  * Fix the possibility of a rare crash in the C extension when deallocating items. See issue 100.</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcalabkova@suse.com" date="1554465600">- update to version 4.6.0
  * Add support for Python 3.7
  * Fix verifyObject for class objects with staticmethods on Python 3.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1575892800">- update to 4.7.1:
  * Use Python 3 syntax in the documentation. See issue 119.
  * Drop support for Python 3.4.
  * Fix queryTaggedValue, getTaggedValue, getTaggedValueTags subclass
    inheritance. See PR 144.
  * Add support for Python 3.8.</changelog>
  <changelog author="pgajdos@suse.com" date="1584360000">- version update to 4.7.2
  - Remove deprecated use of setuptools features.  See `issue 30
    &lt;https://github.com/zopefoundation/zope.interface/issues/30&gt;`_.</changelog>
  <changelog author="pgajdos@suse.com" date="1585051200">- version update to 5.0.1
  * lot of changes, see CHANGES.rst</changelog>
  <changelog author="tchvatal@suse.com" date="1586865600">- Update to 5.1.0:
  * Make @implementer(*iface) and classImplements(cls, *iface) ignore redundant interfaces. If the class already implements an interface through inheritance, it is no longer redeclared specifically for cls. This solves many instances of inconsistent resolution orders, while still allowing the interface to be declared for readability and maintenance purposes. See issue 199.
  * Remove all bare except: statements. Previously, when accessing special attributes such as __provides__, __providedBy__, __class__ and __conform__, this package wrapped such access in a bare except: statement, meaning that many errors could pass silently; typically this would result in a fallback path being taken and sometimes (like with providedBy()) the result would be non-sensical. This is especially true when those attributes are implemented with descriptors. Now, only AttributeError is caught. This makes errors more obvious.
  * In addition, ZODB errors like POSKeyError could now be propagated where previously they would ignored by this package.
  * Require that the second argument (bases) to InterfaceClass is a tuple. This only matters when directly using InterfaceClass to create new interfaces dynamically. Previously, an individual interface was allowed, but did not work correctly. Now it is consistent with type and requires a tuple.
  * Let interfaces define custom __adapt__ methods. This implements the other side of the PEP 246 adaptation protocol: objects being adapted could already implement __conform__ if they know about the interface, and now interfaces can implement __adapt__ if they know about particular objects. There is no performance penalty for interfaces that do not supply custom __adapt__ methods.
  * Make the internal singleton object returned by APIs like implementedBy and directlyProvidedBy for objects that implement or provide no interfaces more immutable. Previously an internal cache could be mutated. See issue 204.</changelog>
  <changelog author="asn@cryptomilk.org" date="1612353600">- Update to version 5.2.0
  * Add documentation section ``Persistency and Equality``
  * Create arm64 wheels.
  * Add support for Python 3.9.
- Fix build on tumbleweed</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Don't switch off python36 build, half of python-* packages depend on it.</changelog>
  <changelog author="os@jacraig.com" date="1625832000">- Update to 5.4.0
  * many changes, see CHANGES.rst</changelog>
  <changelog author="pgajdos@suse.com" date="1634126400">- %check: use %pyunittest rpm macro
- added sources
  + _multibuild</changelog>
  <changelog author="yarunachalam@suse.com" date="1667044800">- Update to version 5.5.0
  * Add support for Python 3.10 and 3.11 (as of 3.11.0rc2).
  * Add missing Trove classifier showing support for Python 3.9.
  * Add some more entries to zope.interface.interfaces.__all__.
  * Disable unsafe math optimizations in C code. See pull request 262.</changelog>
  <changelog author="yarunachalam@suse.com" date="1667995200">- Update to version 5.5.1
  * Add support for final Python 3.11 release.</changelog>
  <changelog author="yarunachalam@suse.com" date="1670241600">- Update to version 5.5.2
  * Add support for building arm64 wheels on macOS.</changelog>
  <changelog author="mcepl@suse.com" date="1681387200">- Make calling of %{sle15modernpython} optional.</changelog>
  <changelog author="dmueller@suse.com" date="1682078400">- add sle15_python_module_pythons (jsc#PED-68)</changelog>
  <changelog author="dmueller@suse.com" date="1683288000">- update to 6.0:
  * Build Linux binary wheels for Python 3.11.
  * Drop support for Python 2.7, 3.5, 3.6.
  * Fix test deprecation warning on Python 3.11.
  * Add preliminary support for Python 3.12 as of 3.12a5.
  * Drop:
  * + `zope.interface.implements`
  * + `zope.interface.implementsOnly`
  * + `zope.interface.classProvides`</changelog>
</package>
<package pkgid="9946bf7132ecebe99ec8c5d0a43bdb764f008634e4e2d8237c46772f5b8fffdf" name="rpm-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="4b319c0699bfaaa6e5cd2f92276d9c40a5f0d40be16aed92331f39b77d8ac057" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="ecbb18cf7adf444ea71afb10127a50890148c26740c579757316c07fda56bf2e" name="rpm" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="7bdaadba078a8ebb58cdac5d83c956c33f791c4893f7fa41d5d69d23bfbf4897" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="80d0d37497a4c37d4ae26ec00658cf8d51a62ed4000506e968d3bed0dd15b614" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="642a540bad1d2879abe3d2eb8e4a83188c371c2b5bbc44bf56620cae7ce9aa34" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="6c7e52fd24af0da2c55a9ed5cef7f06934a4cfbf708483840a1e361dbd8e465c" name="rpm-build" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="18afecd13dcf83d8826b4ee95cd1085eb6cbafcc3d62e5780c43dc3603fe23b2" name="rpm-build" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="0054acf25bf9f3354ddec6a2b00c7429ea6bcbc8ced4aad093e517f49556afd8" name="rpm-build" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="51fad9d5bf1ce68dc859c09762617c4c83c0f791e72321a21cb25c0a5cbc8c8b" name="rpm-build" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="fa5dd3d69ba535e512fe40ddd61d30cb7753c631b8a56b18f390f5c30bf3c505" name="rpm-devel" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="b583fcba722611532104a68e7103034c5757681a3ef0b386c34519b33b357f62" name="rpm-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="63ac47d97fa72e77c7878dcf1a959110ab6ffef19db6255a30f948399093b736" name="rpm-devel" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="28c28b4d28451917dce8af755cf9e19e66815a702b8b14f63428f3ff985df16c" name="rpm-devel" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="c540c92d4f7018428c1b6a82a256176571df11dcfe85025c32aa3a0eca28e9b1" name="rpm-imaevmsign" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="eef83f7864103f39dd65acb7b4a16b3d05b2f7a77c070f79206bf740b5170b63" name="rpm-imaevmsign" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="21305c2301044e35dd0eb37c918ca689050cdbcbb72f3c518240b40d661d3a9f" name="rpm-imaevmsign" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="ce7908f0a21fac5819ceb8bf0bdd22a484849d3419caaa5f108669525e076e1a" name="rpm-imaevmsign" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="739f77079dc81625105d8220af8a3c0265af837c6013d357596c20dacb24841e" name="rpm-ndb-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="87174fa7c562ecc43c0b48e4f2c75d02d2ad5d828846e760656a778f8f05d3de" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="6babb69d62b0c0172ef8c74ecbf7ed557cea14554a1b787dcd722399c896b2ce" name="rpm-ndb" arch="ppc64le">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="4edc61ca4b9a784a2e98e2a3a2a22b1de3e78c8d5911a55ec4e9ab4a276ce554" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="b43382ead3587a7d29dc344aa7cdde7c3f4a975b18471e05da199b3d58d4a7a3" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="b03e8ec84e318f55b8358d135ce3ef468e4779aa43711497d2dc87f14dea292b" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="d89e4a044dab8c06eb1da4133778ae76d7dcb5fb1f217f514d7673be8fb601b1" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="6a98994dcabb719a71a266cdf47a9f244ed26a9fd4454facca2ee89138cc7bbf" name="runc" arch="ppc64le">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="cbcce22c062b71834a6933096d693d13ed93aade45ba8629e71f17d1cc8246bc" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="7369e472eaefb0b1dd36262a8a167f11076b9cb8a804d588c9a7cebeda57222d" name="runc" arch="src">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="e9dcafb6278af00b5b448914faa83a42599988feb22d06eb9e96cbc342994811" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="a727aa0d98a4b97f9ccb6aea90555d18056e4b9faf833be3b504001320491973" name="rust" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="918e016e1a83bb425905ecadb8ccbf82b2d9efd6c9c5d261623ddd4fdaa5e917" name="rust" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="acece4cb34091653c24f1beb63bf1bc64f600d78b7330b9983741e3c8ff7fb6c" name="rust" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="358f68d5edc9f779dd0d882c0c20ea5e85eea52f3632c18d2237b8271c2c105f" name="rust" arch="src">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="bf19aff4c7d9522fc5383dbcdcf867f3ab9acd08ab725a9b7bea2a1dc531ea56" name="rust" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.27.12.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
  <changelog author="william.brown@suse.com" date="1693137600">- Update to version 1.72.0 - for details see the rust1.72 package</changelog>
  <changelog author="william.brown@suse.com" date="1696593600">- Update to version 1.73.0 - for details see the rust1.73 package</changelog>
  <changelog author="william.brown@suse.com" date="1700222400">- Update to version 1.74.0 - for details see the rust1.74 package</changelog>
  <changelog author="william.brown@suse.com" date="1704110400">- Update to version 1.75.0 - for details see the rust1.75 package</changelog>
  <changelog author="william.brown@suse.com" date="1707480000">- Update to version 1.76.0 - for details see the rust1.76 package</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.77.0 - for details see the rust1.77 package</changelog>
  <changelog author="william.brown@suse.com" date="1715688000">- Update to version 1.78.0 - for details see the rust1.78 package</changelog>
</package>
<package pkgid="72c61e4d6f899c86c3fdffde5744a0c93c4ea01e7c953d6dadeb2dd3d7209014" name="rust1.78" arch="aarch64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="edfa5fdba52171b48d3d85f594c71f1344c0d835c4915efe6f3e3c67b6b97943" name="rust1.78" arch="src">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="6c1fb85919e4dc637ba39d0aef702b1d9eed73e44ffc778f93b2902cf16f4f47" name="rust1.78" arch="ppc64le">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="03b6d7033efff3b7357ae2b533a4e29e234b5a28ec8b4bb415c7af05de287289" name="rust1.78" arch="s390x">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="d1c606aec886132f8d66586f200115d04bd715ece07de1241b0564df365a7940" name="rust1.78" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="150500.11.3.1"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  Language
--------
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  Compiler
--------
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  Cargo
-----
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  Misc
----
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
</package>
<package pkgid="362c972d0e5af0f606992b3b250b542132f8c745b02fd819aeb829ecaba0dfdc" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="1759d05e16eeba07b48cb0ea27bd1b3bd3bb675f0f5a7b9ed81ea7766e14d9cb" name="salt" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="708da4e6e5b6b4a5698d1616eb4b5ad667e1808a5204122cac44e0a105af488e" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="4bce8b75fe27191117513dbc064c91bbb7dbd863b167d02ba521107f0acde8c1" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="74de2a82d770504c3b2d623e458c0af01449bd75c4a99a47f4533da7dd18971e" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="790fb90568e701a6783ed6c1df9f83cf94f6c62c9aae4708607d54c5535b80cc" name="salt-api" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="eb6d2d8165e1311b12de0d65ea76e41bdf5b22fbbf21d934aebe491346faf101" name="salt-api" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="53124ec9e21070a8750ee45bed1ff7e8c713f1598e88259fd9e261db8f66b238" name="salt-api" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="895087508fb70fbc4f3f3c24e2dd4f660757637dac875edce1f38f86fca587c9" name="salt-api" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="4eee510b691b1b6c1942d303bd0ce2532b5f4ef983dd013d3cadf6d1f7b15df9" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="ef9059be3658d0138ec3312c249224691709180cc3fe9dc48b8490f2215e07e5" name="salt-cloud" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="05c9ddb6491ece4ca62de11990ebd1ff56c6d86aedffbec13b23d1ccf5c218e2" name="salt-cloud" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="7cb1647e7bec93d2b17773ffd383d252e45dfab427f79795d07fc3ee15273c3e" name="salt-cloud" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="e69c756b4b69ea8da671205907864fbcc9795fa1acb731271e0542cc5dac7925" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="8d469eddacfcd4f6fe91938ba9d28b2cbddcf28cfefc32f60c0d11a93ee7b07e" name="salt-doc" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="6544cb9f57053ee6ccd72fa36f996a870661117e9770bce0c8cbafe819f85c09" name="salt-doc" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="381881a2c90c28fe7615e503347785f1e3063e339b7b985009356ec34033a205" name="salt-doc" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="70525278f728e6ab38f4a6ec5871e18a042b1308edcf14b9cba98e322a52db1c" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="ec744b1684bbe1a1e5da04ba0d4446968db2cc525f0540cf379c96cdbe4c6be0" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="c4eb1086bff830d34c4101402ad4a3b3805f661b1dc4146c9329fceb5805a254" name="salt-master" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="99ffca41dc3146350e328ac7e35d32ba1022561d34874c12d17e5336082bbf88" name="salt-master" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="664e9aae22b4da0fb88018eb0b424a80920089fc3d1159df94a78cf9d9d0c4b8" name="salt-master" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="0d961b03487b9731ac089db5a2a0bdb6bdb4c4e619d0badd09a719d18496d797" name="salt-master" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="915b35ab3335a293890e554dd2cc6f9e5ccefa69690a45cdb88b78f4b32e36c6" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="55580c5ae256452d1ee3006c0d4d082f3f638fff90e7cf4ada1ccb0295802d5f" name="salt-minion" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="3495e532a94277802278cae6de431707244579e7b0767ebf3f7229a45deaccad" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="fd53f6509fa118487cff469599c0f7699a06f9738913330f16c7196668b8a0c6" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="04afd3ce908fa0e032c8fdaf5b5a8e7dcefec9808ad8f1c086de61a76cee2b56" name="salt-proxy" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="014ff0e575ca1214d18d9956c22aee43028ce45bf0e3645e5727a116106d1c54" name="salt-proxy" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="2a58bd9446d253c1494b1528b7d7cc8b9c1e84d42477b7758632e9cec2d10a06" name="salt-proxy" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="4455989ef5a152046583e29682f0c1775767475453604d229da370d41b3c2eb4" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="48ca5f7d79447cbfb94dacc555d64039faf597804f0f05abbdad023b46e24723" name="salt-ssh" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="d82ae9819f371009457a3f47dcd37e7b26b53a9f1eef57121aa6aa0a2ac86b47" name="salt-ssh" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="aa8182a7b6ef0d4cfae38ec420b5c94e93c5d2c9817b0dad0bfb5b4ee2a0d323" name="salt-ssh" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="ae6c3c70cd17e4582cb0f85eaf452e8880bfddcdfde339dd9a74cc5a7cfc65fa" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="d54cfb8f5a2cff0b8dd635394b89f0d5b8517a4f8c95ae50c5278a0937c364f8" name="salt-standalone-formulas-configuration" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="fab7aeb16d6dd42b31c6857407ae88f346b4d3353d8b0f70ad768886ed7aeb63" name="salt-standalone-formulas-configuration" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="359c015691248494eaa38eefce71dd9ee0c2a47ccc77a0b7f7e835535a7b9d9e" name="salt-standalone-formulas-configuration" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="b053eb952bdb962dc638be9bf1c0ee5e4225cf7729804cb6e7e69b00e5d6cb9b" name="salt-standalone-formulas-configuration" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="a11d860dd983ecd1c351b2f84e1133cb94501ca321a0aa2905f27b4a353d9e61" name="salt-syndic" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="fde342df2c5abcc6bb81cbe3c06f63bb14eebe5712009823b46bb8dafc91fb3d" name="salt-syndic" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="a082bb950de6f1c60e88d1a98bae8c256a3c008c69d89eea6718d8416d52f4db" name="salt-syndic" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="91c30c04475ec4c2d2d7ef747c4def9be0d52841db78d4d0fcbc698180d2f6eb" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="66662b9998b9f1bc12de35c71516f6a8b1ea0e02b0c627f3d827a6ab084180a4" name="salt-test" arch="src">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="2271596a67df255be133e4314abc217da02bbb35cd71c321a2803a455bcc5e0c" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="be45d5cf3b5574292de7f3117239ac316691dd96e0c1e552b8c0e3653b4a5493" name="salt-transactional-update" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="642695c55ff11838042772524cd82753c42e12ceb4e5eba7f9611f0b986f5a77" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="62f07d9e210579d816022da0c13334cff1ee6efc41be3670a07b889bee0f139c" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="573d07a2bd7f7d51c71adbac4b096d47be737d67e82a4c1fc0883d0493d20383" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="665ce569aedf612ec02ef4609bc996326b69ccb0111c0ea0e3817bb4d219dae5" name="saxpath" arch="noarch">
  <version epoch="0" ver="1.0" rel="150200.5.3.3"/>
  <changelog author="fstrba@suse.com" date="1692792000">- Initial packaging of standalone saxpath with version 1.0 FCS</changelog>
</package>
<package pkgid="9b35b9d7acdf0223c7ff74908f7a5dfd849b6c5b825f7b5d85f76b458f6476ad" name="saxpath" arch="src">
  <version epoch="0" ver="1.0" rel="150200.5.3.3"/>
  <changelog author="fstrba@suse.com" date="1692792000">- Initial packaging of standalone saxpath with version 1.0 FCS</changelog>
</package>
<package pkgid="2e6744ebfbeb2ce7f543f1925ec66044d0ea52845e90ae3be38171f96fa11e93" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.72" rel="150000.1.78.2"/>
  <changelog author="meissner@suse.com" date="1649073600">- updated to 0.1.61 (jsc#ECO-3319)
  - Stop building PCI-DSS-centric XCCDF benchmark for RHEL 7
  - Introduce OL9 product
  - Implement handling of logical expressions in platform definitions</changelog>
  <changelog author="meissner@suse.com" date="1653912000">- updated to 0.1.62 (jsc#ECO-3319)
  - Update rhel8 stig to v1r6
  - OL7 STIG v2r7 update
  - Initial definition of ANSSI BP28 minmal profile for SLE</changelog>
  <changelog author="meissner@suse.com" date="1654776000">- add python3-setuptools for all builds (so it is also used on debian
  and centos flavors)</changelog>
  <changelog author="meissner@suse.com" date="1656331200">- fix-bash-template.patch: convert one bash emitter to new jinja method.
  (bsc#1200163)</changelog>
  <changelog author="jgonzalez@suse.com" date="1657108800">- Fix the build for RHEL 9 and clones</changelog>
  <changelog author="jgonzalez@suse.com" date="1657886400">- Fix the build for RHEL 7 and clones (python-setuptools is used)</changelog>
  <changelog author="meissner@suse.com" date="1659182400">- updated to 0.1.63 (jsc#ECO-3319)
  - multiple bugfixes in SUSE profiles
  - Expand project guidelines
  - Add Draft OCP4 STIG profile
  - Add anssi_bp28_intermediary profile
  - add products/uos20 to support UnionTech OS Server 20
  - products/alinux3: Add CIS Alibaba Cloud Linux 3 profiles
  - Remove WRLinux Products
  - Update CIS RHEL8 Benchmark for v2.0.0
- removed fix-bash-template.patch: fixed upstream
- Fixed: stig: /etc/shadow group owner should not be root but shadow (bsc#1200149)
- Fixed: sles15_script-stig.sh: remediation_functions: No such file or directory (bsc#1200163)
- Fixed: SLES-15-010130 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity (bsc#1200122)</changelog>
  <changelog author="meissner@suse.com" date="1663761600">- Added several RPM requires that are needed by the SUSE remediation
  scripts. (e.g. awk is not necessary installed)</changelog>
  <changelog author="meissner@suse.com" date="1664625600">- updated to 0.1.64 (jsc#ECO-3319)
  - Introduce ol9 stig profile
  - Introduce Ol9 anssi profiles
  - Update RHEL8 STIG to V1R7
  - Introduce e8 profile for OL9
  - Update RHEL7 STIG to V3R8
  - some SUSE profile fixes</changelog>
  <changelog author="meissner@suse.com" date="1664971200">- enable ubuntu 2204 build</changelog>
  <changelog author="meissner@suse.com" date="1669377600">- require sudo, as remediations touch sudo config or use sudo.</changelog>
  <changelog author="meissner@suse.com" date="1670241600">- updated to 0.1.65 (jsc#ECO-3319)
  - Introduce cui profile for OL9
  - Remove Support for OVAL 5.10
  - Rename account_passwords_pam_faillock_audit
  - CI ansible hardening and rename of existing Bash hardening
  - Update contributors list for v0.1.65 release
  - various SUSE profile specific fixes</changelog>
  <changelog author="meissner@suse.com" date="1675684800">- updated to 0.1.66 (jsc#ECO-3319)
   - Ubuntu 22.04 CIS
   - OL7 stig v2r9 update
   - Bump OL8 STIG version to V1R4
   - Update RHEL7 STIG to V3R10
   - Update RHEL8 STIG to V1R9
   - Introduce CIS RHEL9 profiles
- also various SUSE profile fixes were done</changelog>
  <changelog author="meissner@suse.com" date="1686830400">- updated to 0.1.68 (jsc#ECO-3319)
  - Bump OL8 STIG version to V1R6
  - Introduce a Product class, make the project work with it
  - Introduce Fedora and Firefox CaC profiles for common workstation users
  - OL7 DISA STIG v2r11 update
  - Publish rendered policy artifacts
  - Update ANSSI BP-028 to version 2.0
- updated to 0.1.67 (jsc#ECO-3319)
  - Add utils/controlrefcheck.py
  - RHEL 9 STIG Update Q1 2023
  - Include warning for NetworkManager keyfiles in RHEL9
  - OL7 stig v2r10 update
  - Bump version of OL8 STIG to V1R5
- various enhancements to SLE profiles
- scap-security-guide-UnicodeEncodeError-character-fix.patch: fixed upstream</changelog>
  <changelog author="meissner@suse.com" date="1690459200">- 0001-Revert-fix-aide-remediations-add-crontabs.patch:
  revert patch that breaks the SLE hardening (bsc#1213691)</changelog>
  <changelog author="meissner@suse.com" date="1690977600">- updated to 0.1.69 (jsc#ECO-3319)
  - Introduce a JSON build manifest (#10761)
  - Introduce a script to compare ComplianceAsCode versions (#10768)
  - Introduce CCN profiles for RHEL9 (#10860)
  - Map rules to components (#10609)
  - products/anolis23: supports Anolis OS 23 (#10548)
  - Render components to HTML (#10709)
  - Store rendered control files (#10656)
  - Test and use rules to components mapping (#10693)
  - Use distributed product properties (#10554)
- 0001-Revert-fix-aide-remediations-add-crontabs.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1697544000">- updated to 0.1.70 (jsc#ECO-3319)
  - Add openembedded distro support (#10793)
  - Remove DRAFT wording for OpenShift STIG (#11100)
  - Remove test-function-check_playbook_file_removed_and_added test (#10982)
  - scap-security-guide: Add Poky support (#11046)</changelog>
  <changelog author="meissner@suse.com" date="1701864000">- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)</changelog>
  <changelog author="meissner@suse.com" date="1702987200">- updated to 0.1.71 (jsc#ECO-3319)
  - Add RHEL 9 STIG
  - Add support for Debian 12
  - Update PCI-DSS profile for RHEL
  - lots of bugfixes and improvements for SLE
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69</changelog>
  <changelog author="meissner@suse.com" date="1707825600">- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream</changelog>
</package>
<package pkgid="2b107948a1ff1494786168a6a3f27aa99a7bf5194806933f8165a4aeebe2f414" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.72" rel="150000.1.78.2"/>
  <changelog author="meissner@suse.com" date="1649073600">- updated to 0.1.61 (jsc#ECO-3319)
  - Stop building PCI-DSS-centric XCCDF benchmark for RHEL 7
  - Introduce OL9 product
  - Implement handling of logical expressions in platform definitions</changelog>
  <changelog author="meissner@suse.com" date="1653912000">- updated to 0.1.62 (jsc#ECO-3319)
  - Update rhel8 stig to v1r6
  - OL7 STIG v2r7 update
  - Initial definition of ANSSI BP28 minmal profile for SLE</changelog>
  <changelog author="meissner@suse.com" date="1654776000">- add python3-setuptools for all builds (so it is also used on debian
  and centos flavors)</changelog>
  <changelog author="meissner@suse.com" date="1656331200">- fix-bash-template.patch: convert one bash emitter to new jinja method.
  (bsc#1200163)</changelog>
  <changelog author="jgonzalez@suse.com" date="1657108800">- Fix the build for RHEL 9 and clones</changelog>
  <changelog author="jgonzalez@suse.com" date="1657886400">- Fix the build for RHEL 7 and clones (python-setuptools is used)</changelog>
  <changelog author="meissner@suse.com" date="1659182400">- updated to 0.1.63 (jsc#ECO-3319)
  - multiple bugfixes in SUSE profiles
  - Expand project guidelines
  - Add Draft OCP4 STIG profile
  - Add anssi_bp28_intermediary profile
  - add products/uos20 to support UnionTech OS Server 20
  - products/alinux3: Add CIS Alibaba Cloud Linux 3 profiles
  - Remove WRLinux Products
  - Update CIS RHEL8 Benchmark for v2.0.0
- removed fix-bash-template.patch: fixed upstream
- Fixed: stig: /etc/shadow group owner should not be root but shadow (bsc#1200149)
- Fixed: sles15_script-stig.sh: remediation_functions: No such file or directory (bsc#1200163)
- Fixed: SLES-15-010130 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity (bsc#1200122)</changelog>
  <changelog author="meissner@suse.com" date="1663761600">- Added several RPM requires that are needed by the SUSE remediation
  scripts. (e.g. awk is not necessary installed)</changelog>
  <changelog author="meissner@suse.com" date="1664625600">- updated to 0.1.64 (jsc#ECO-3319)
  - Introduce ol9 stig profile
  - Introduce Ol9 anssi profiles
  - Update RHEL8 STIG to V1R7
  - Introduce e8 profile for OL9
  - Update RHEL7 STIG to V3R8
  - some SUSE profile fixes</changelog>
  <changelog author="meissner@suse.com" date="1664971200">- enable ubuntu 2204 build</changelog>
  <changelog author="meissner@suse.com" date="1669377600">- require sudo, as remediations touch sudo config or use sudo.</changelog>
  <changelog author="meissner@suse.com" date="1670241600">- updated to 0.1.65 (jsc#ECO-3319)
  - Introduce cui profile for OL9
  - Remove Support for OVAL 5.10
  - Rename account_passwords_pam_faillock_audit
  - CI ansible hardening and rename of existing Bash hardening
  - Update contributors list for v0.1.65 release
  - various SUSE profile specific fixes</changelog>
  <changelog author="meissner@suse.com" date="1675684800">- updated to 0.1.66 (jsc#ECO-3319)
   - Ubuntu 22.04 CIS
   - OL7 stig v2r9 update
   - Bump OL8 STIG version to V1R4
   - Update RHEL7 STIG to V3R10
   - Update RHEL8 STIG to V1R9
   - Introduce CIS RHEL9 profiles
- also various SUSE profile fixes were done</changelog>
  <changelog author="meissner@suse.com" date="1686830400">- updated to 0.1.68 (jsc#ECO-3319)
  - Bump OL8 STIG version to V1R6
  - Introduce a Product class, make the project work with it
  - Introduce Fedora and Firefox CaC profiles for common workstation users
  - OL7 DISA STIG v2r11 update
  - Publish rendered policy artifacts
  - Update ANSSI BP-028 to version 2.0
- updated to 0.1.67 (jsc#ECO-3319)
  - Add utils/controlrefcheck.py
  - RHEL 9 STIG Update Q1 2023
  - Include warning for NetworkManager keyfiles in RHEL9
  - OL7 stig v2r10 update
  - Bump version of OL8 STIG to V1R5
- various enhancements to SLE profiles
- scap-security-guide-UnicodeEncodeError-character-fix.patch: fixed upstream</changelog>
  <changelog author="meissner@suse.com" date="1690459200">- 0001-Revert-fix-aide-remediations-add-crontabs.patch:
  revert patch that breaks the SLE hardening (bsc#1213691)</changelog>
  <changelog author="meissner@suse.com" date="1690977600">- updated to 0.1.69 (jsc#ECO-3319)
  - Introduce a JSON build manifest (#10761)
  - Introduce a script to compare ComplianceAsCode versions (#10768)
  - Introduce CCN profiles for RHEL9 (#10860)
  - Map rules to components (#10609)
  - products/anolis23: supports Anolis OS 23 (#10548)
  - Render components to HTML (#10709)
  - Store rendered control files (#10656)
  - Test and use rules to components mapping (#10693)
  - Use distributed product properties (#10554)
- 0001-Revert-fix-aide-remediations-add-crontabs.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1697544000">- updated to 0.1.70 (jsc#ECO-3319)
  - Add openembedded distro support (#10793)
  - Remove DRAFT wording for OpenShift STIG (#11100)
  - Remove test-function-check_playbook_file_removed_and_added test (#10982)
  - scap-security-guide: Add Poky support (#11046)</changelog>
  <changelog author="meissner@suse.com" date="1701864000">- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)</changelog>
  <changelog author="meissner@suse.com" date="1702987200">- updated to 0.1.71 (jsc#ECO-3319)
  - Add RHEL 9 STIG
  - Add support for Debian 12
  - Update PCI-DSS profile for RHEL
  - lots of bugfixes and improvements for SLE
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69</changelog>
  <changelog author="meissner@suse.com" date="1707825600">- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream</changelog>
</package>
<package pkgid="8ce09eb1483ff8aa7d530c87e1e4f2bf333ca571b164dc47c714555b5078aec9" name="scap-security-guide-debian" arch="noarch">
  <version epoch="0" ver="0.1.72" rel="150000.1.78.2"/>
  <changelog author="meissner@suse.com" date="1649073600">- updated to 0.1.61 (jsc#ECO-3319)
  - Stop building PCI-DSS-centric XCCDF benchmark for RHEL 7
  - Introduce OL9 product
  - Implement handling of logical expressions in platform definitions</changelog>
  <changelog author="meissner@suse.com" date="1653912000">- updated to 0.1.62 (jsc#ECO-3319)
  - Update rhel8 stig to v1r6
  - OL7 STIG v2r7 update
  - Initial definition of ANSSI BP28 minmal profile for SLE</changelog>
  <changelog author="meissner@suse.com" date="1654776000">- add python3-setuptools for all builds (so it is also used on debian
  and centos flavors)</changelog>
  <changelog author="meissner@suse.com" date="1656331200">- fix-bash-template.patch: convert one bash emitter to new jinja method.
  (bsc#1200163)</changelog>
  <changelog author="jgonzalez@suse.com" date="1657108800">- Fix the build for RHEL 9 and clones</changelog>
  <changelog author="jgonzalez@suse.com" date="1657886400">- Fix the build for RHEL 7 and clones (python-setuptools is used)</changelog>
  <changelog author="meissner@suse.com" date="1659182400">- updated to 0.1.63 (jsc#ECO-3319)
  - multiple bugfixes in SUSE profiles
  - Expand project guidelines
  - Add Draft OCP4 STIG profile
  - Add anssi_bp28_intermediary profile
  - add products/uos20 to support UnionTech OS Server 20
  - products/alinux3: Add CIS Alibaba Cloud Linux 3 profiles
  - Remove WRLinux Products
  - Update CIS RHEL8 Benchmark for v2.0.0
- removed fix-bash-template.patch: fixed upstream
- Fixed: stig: /etc/shadow group owner should not be root but shadow (bsc#1200149)
- Fixed: sles15_script-stig.sh: remediation_functions: No such file or directory (bsc#1200163)
- Fixed: SLES-15-010130 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity (bsc#1200122)</changelog>
  <changelog author="meissner@suse.com" date="1663761600">- Added several RPM requires that are needed by the SUSE remediation
  scripts. (e.g. awk is not necessary installed)</changelog>
  <changelog author="meissner@suse.com" date="1664625600">- updated to 0.1.64 (jsc#ECO-3319)
  - Introduce ol9 stig profile
  - Introduce Ol9 anssi profiles
  - Update RHEL8 STIG to V1R7
  - Introduce e8 profile for OL9
  - Update RHEL7 STIG to V3R8
  - some SUSE profile fixes</changelog>
  <changelog author="meissner@suse.com" date="1664971200">- enable ubuntu 2204 build</changelog>
  <changelog author="meissner@suse.com" date="1669377600">- require sudo, as remediations touch sudo config or use sudo.</changelog>
  <changelog author="meissner@suse.com" date="1670241600">- updated to 0.1.65 (jsc#ECO-3319)
  - Introduce cui profile for OL9
  - Remove Support for OVAL 5.10
  - Rename account_passwords_pam_faillock_audit
  - CI ansible hardening and rename of existing Bash hardening
  - Update contributors list for v0.1.65 release
  - various SUSE profile specific fixes</changelog>
  <changelog author="meissner@suse.com" date="1675684800">- updated to 0.1.66 (jsc#ECO-3319)
   - Ubuntu 22.04 CIS
   - OL7 stig v2r9 update
   - Bump OL8 STIG version to V1R4
   - Update RHEL7 STIG to V3R10
   - Update RHEL8 STIG to V1R9
   - Introduce CIS RHEL9 profiles
- also various SUSE profile fixes were done</changelog>
  <changelog author="meissner@suse.com" date="1686830400">- updated to 0.1.68 (jsc#ECO-3319)
  - Bump OL8 STIG version to V1R6
  - Introduce a Product class, make the project work with it
  - Introduce Fedora and Firefox CaC profiles for common workstation users
  - OL7 DISA STIG v2r11 update
  - Publish rendered policy artifacts
  - Update ANSSI BP-028 to version 2.0
- updated to 0.1.67 (jsc#ECO-3319)
  - Add utils/controlrefcheck.py
  - RHEL 9 STIG Update Q1 2023
  - Include warning for NetworkManager keyfiles in RHEL9
  - OL7 stig v2r10 update
  - Bump version of OL8 STIG to V1R5
- various enhancements to SLE profiles
- scap-security-guide-UnicodeEncodeError-character-fix.patch: fixed upstream</changelog>
  <changelog author="meissner@suse.com" date="1690459200">- 0001-Revert-fix-aide-remediations-add-crontabs.patch:
  revert patch that breaks the SLE hardening (bsc#1213691)</changelog>
  <changelog author="meissner@suse.com" date="1690977600">- updated to 0.1.69 (jsc#ECO-3319)
  - Introduce a JSON build manifest (#10761)
  - Introduce a script to compare ComplianceAsCode versions (#10768)
  - Introduce CCN profiles for RHEL9 (#10860)
  - Map rules to components (#10609)
  - products/anolis23: supports Anolis OS 23 (#10548)
  - Render components to HTML (#10709)
  - Store rendered control files (#10656)
  - Test and use rules to components mapping (#10693)
  - Use distributed product properties (#10554)
- 0001-Revert-fix-aide-remediations-add-crontabs.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1697544000">- updated to 0.1.70 (jsc#ECO-3319)
  - Add openembedded distro support (#10793)
  - Remove DRAFT wording for OpenShift STIG (#11100)
  - Remove test-function-check_playbook_file_removed_and_added test (#10982)
  - scap-security-guide: Add Poky support (#11046)</changelog>
  <changelog author="meissner@suse.com" date="1701864000">- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)</changelog>
  <changelog author="meissner@suse.com" date="1702987200">- updated to 0.1.71 (jsc#ECO-3319)
  - Add RHEL 9 STIG
  - Add support for Debian 12
  - Update PCI-DSS profile for RHEL
  - lots of bugfixes and improvements for SLE
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69</changelog>
  <changelog author="meissner@suse.com" date="1707825600">- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream</changelog>
</package>
<package pkgid="5aedbc7ef7c98197cd8febeda5c59dde9b8c5c57847aee153949df7e9d8d0c4d" name="scap-security-guide-redhat" arch="noarch">
  <version epoch="0" ver="0.1.72" rel="150000.1.78.2"/>
  <changelog author="meissner@suse.com" date="1649073600">- updated to 0.1.61 (jsc#ECO-3319)
  - Stop building PCI-DSS-centric XCCDF benchmark for RHEL 7
  - Introduce OL9 product
  - Implement handling of logical expressions in platform definitions</changelog>
  <changelog author="meissner@suse.com" date="1653912000">- updated to 0.1.62 (jsc#ECO-3319)
  - Update rhel8 stig to v1r6
  - OL7 STIG v2r7 update
  - Initial definition of ANSSI BP28 minmal profile for SLE</changelog>
  <changelog author="meissner@suse.com" date="1654776000">- add python3-setuptools for all builds (so it is also used on debian
  and centos flavors)</changelog>
  <changelog author="meissner@suse.com" date="1656331200">- fix-bash-template.patch: convert one bash emitter to new jinja method.
  (bsc#1200163)</changelog>
  <changelog author="jgonzalez@suse.com" date="1657108800">- Fix the build for RHEL 9 and clones</changelog>
  <changelog author="jgonzalez@suse.com" date="1657886400">- Fix the build for RHEL 7 and clones (python-setuptools is used)</changelog>
  <changelog author="meissner@suse.com" date="1659182400">- updated to 0.1.63 (jsc#ECO-3319)
  - multiple bugfixes in SUSE profiles
  - Expand project guidelines
  - Add Draft OCP4 STIG profile
  - Add anssi_bp28_intermediary profile
  - add products/uos20 to support UnionTech OS Server 20
  - products/alinux3: Add CIS Alibaba Cloud Linux 3 profiles
  - Remove WRLinux Products
  - Update CIS RHEL8 Benchmark for v2.0.0
- removed fix-bash-template.patch: fixed upstream
- Fixed: stig: /etc/shadow group owner should not be root but shadow (bsc#1200149)
- Fixed: sles15_script-stig.sh: remediation_functions: No such file or directory (bsc#1200163)
- Fixed: SLES-15-010130 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity (bsc#1200122)</changelog>
  <changelog author="meissner@suse.com" date="1663761600">- Added several RPM requires that are needed by the SUSE remediation
  scripts. (e.g. awk is not necessary installed)</changelog>
  <changelog author="meissner@suse.com" date="1664625600">- updated to 0.1.64 (jsc#ECO-3319)
  - Introduce ol9 stig profile
  - Introduce Ol9 anssi profiles
  - Update RHEL8 STIG to V1R7
  - Introduce e8 profile for OL9
  - Update RHEL7 STIG to V3R8
  - some SUSE profile fixes</changelog>
  <changelog author="meissner@suse.com" date="1664971200">- enable ubuntu 2204 build</changelog>
  <changelog author="meissner@suse.com" date="1669377600">- require sudo, as remediations touch sudo config or use sudo.</changelog>
  <changelog author="meissner@suse.com" date="1670241600">- updated to 0.1.65 (jsc#ECO-3319)
  - Introduce cui profile for OL9
  - Remove Support for OVAL 5.10
  - Rename account_passwords_pam_faillock_audit
  - CI ansible hardening and rename of existing Bash hardening
  - Update contributors list for v0.1.65 release
  - various SUSE profile specific fixes</changelog>
  <changelog author="meissner@suse.com" date="1675684800">- updated to 0.1.66 (jsc#ECO-3319)
   - Ubuntu 22.04 CIS
   - OL7 stig v2r9 update
   - Bump OL8 STIG version to V1R4
   - Update RHEL7 STIG to V3R10
   - Update RHEL8 STIG to V1R9
   - Introduce CIS RHEL9 profiles
- also various SUSE profile fixes were done</changelog>
  <changelog author="meissner@suse.com" date="1686830400">- updated to 0.1.68 (jsc#ECO-3319)
  - Bump OL8 STIG version to V1R6
  - Introduce a Product class, make the project work with it
  - Introduce Fedora and Firefox CaC profiles for common workstation users
  - OL7 DISA STIG v2r11 update
  - Publish rendered policy artifacts
  - Update ANSSI BP-028 to version 2.0
- updated to 0.1.67 (jsc#ECO-3319)
  - Add utils/controlrefcheck.py
  - RHEL 9 STIG Update Q1 2023
  - Include warning for NetworkManager keyfiles in RHEL9
  - OL7 stig v2r10 update
  - Bump version of OL8 STIG to V1R5
- various enhancements to SLE profiles
- scap-security-guide-UnicodeEncodeError-character-fix.patch: fixed upstream</changelog>
  <changelog author="meissner@suse.com" date="1690459200">- 0001-Revert-fix-aide-remediations-add-crontabs.patch:
  revert patch that breaks the SLE hardening (bsc#1213691)</changelog>
  <changelog author="meissner@suse.com" date="1690977600">- updated to 0.1.69 (jsc#ECO-3319)
  - Introduce a JSON build manifest (#10761)
  - Introduce a script to compare ComplianceAsCode versions (#10768)
  - Introduce CCN profiles for RHEL9 (#10860)
  - Map rules to components (#10609)
  - products/anolis23: supports Anolis OS 23 (#10548)
  - Render components to HTML (#10709)
  - Store rendered control files (#10656)
  - Test and use rules to components mapping (#10693)
  - Use distributed product properties (#10554)
- 0001-Revert-fix-aide-remediations-add-crontabs.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1697544000">- updated to 0.1.70 (jsc#ECO-3319)
  - Add openembedded distro support (#10793)
  - Remove DRAFT wording for OpenShift STIG (#11100)
  - Remove test-function-check_playbook_file_removed_and_added test (#10982)
  - scap-security-guide: Add Poky support (#11046)</changelog>
  <changelog author="meissner@suse.com" date="1701864000">- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)</changelog>
  <changelog author="meissner@suse.com" date="1702987200">- updated to 0.1.71 (jsc#ECO-3319)
  - Add RHEL 9 STIG
  - Add support for Debian 12
  - Update PCI-DSS profile for RHEL
  - lots of bugfixes and improvements for SLE
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69</changelog>
  <changelog author="meissner@suse.com" date="1707825600">- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream</changelog>
</package>
<package pkgid="805645cdd3897a8ce61ab966e7de9c97db5952d6433b5f11197499915f327b02" name="scap-security-guide-ubuntu" arch="noarch">
  <version epoch="0" ver="0.1.72" rel="150000.1.78.2"/>
  <changelog author="meissner@suse.com" date="1649073600">- updated to 0.1.61 (jsc#ECO-3319)
  - Stop building PCI-DSS-centric XCCDF benchmark for RHEL 7
  - Introduce OL9 product
  - Implement handling of logical expressions in platform definitions</changelog>
  <changelog author="meissner@suse.com" date="1653912000">- updated to 0.1.62 (jsc#ECO-3319)
  - Update rhel8 stig to v1r6
  - OL7 STIG v2r7 update
  - Initial definition of ANSSI BP28 minmal profile for SLE</changelog>
  <changelog author="meissner@suse.com" date="1654776000">- add python3-setuptools for all builds (so it is also used on debian
  and centos flavors)</changelog>
  <changelog author="meissner@suse.com" date="1656331200">- fix-bash-template.patch: convert one bash emitter to new jinja method.
  (bsc#1200163)</changelog>
  <changelog author="jgonzalez@suse.com" date="1657108800">- Fix the build for RHEL 9 and clones</changelog>
  <changelog author="jgonzalez@suse.com" date="1657886400">- Fix the build for RHEL 7 and clones (python-setuptools is used)</changelog>
  <changelog author="meissner@suse.com" date="1659182400">- updated to 0.1.63 (jsc#ECO-3319)
  - multiple bugfixes in SUSE profiles
  - Expand project guidelines
  - Add Draft OCP4 STIG profile
  - Add anssi_bp28_intermediary profile
  - add products/uos20 to support UnionTech OS Server 20
  - products/alinux3: Add CIS Alibaba Cloud Linux 3 profiles
  - Remove WRLinux Products
  - Update CIS RHEL8 Benchmark for v2.0.0
- removed fix-bash-template.patch: fixed upstream
- Fixed: stig: /etc/shadow group owner should not be root but shadow (bsc#1200149)
- Fixed: sles15_script-stig.sh: remediation_functions: No such file or directory (bsc#1200163)
- Fixed: SLES-15-010130 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity (bsc#1200122)</changelog>
  <changelog author="meissner@suse.com" date="1663761600">- Added several RPM requires that are needed by the SUSE remediation
  scripts. (e.g. awk is not necessary installed)</changelog>
  <changelog author="meissner@suse.com" date="1664625600">- updated to 0.1.64 (jsc#ECO-3319)
  - Introduce ol9 stig profile
  - Introduce Ol9 anssi profiles
  - Update RHEL8 STIG to V1R7
  - Introduce e8 profile for OL9
  - Update RHEL7 STIG to V3R8
  - some SUSE profile fixes</changelog>
  <changelog author="meissner@suse.com" date="1664971200">- enable ubuntu 2204 build</changelog>
  <changelog author="meissner@suse.com" date="1669377600">- require sudo, as remediations touch sudo config or use sudo.</changelog>
  <changelog author="meissner@suse.com" date="1670241600">- updated to 0.1.65 (jsc#ECO-3319)
  - Introduce cui profile for OL9
  - Remove Support for OVAL 5.10
  - Rename account_passwords_pam_faillock_audit
  - CI ansible hardening and rename of existing Bash hardening
  - Update contributors list for v0.1.65 release
  - various SUSE profile specific fixes</changelog>
  <changelog author="meissner@suse.com" date="1675684800">- updated to 0.1.66 (jsc#ECO-3319)
   - Ubuntu 22.04 CIS
   - OL7 stig v2r9 update
   - Bump OL8 STIG version to V1R4
   - Update RHEL7 STIG to V3R10
   - Update RHEL8 STIG to V1R9
   - Introduce CIS RHEL9 profiles
- also various SUSE profile fixes were done</changelog>
  <changelog author="meissner@suse.com" date="1686830400">- updated to 0.1.68 (jsc#ECO-3319)
  - Bump OL8 STIG version to V1R6
  - Introduce a Product class, make the project work with it
  - Introduce Fedora and Firefox CaC profiles for common workstation users
  - OL7 DISA STIG v2r11 update
  - Publish rendered policy artifacts
  - Update ANSSI BP-028 to version 2.0
- updated to 0.1.67 (jsc#ECO-3319)
  - Add utils/controlrefcheck.py
  - RHEL 9 STIG Update Q1 2023
  - Include warning for NetworkManager keyfiles in RHEL9
  - OL7 stig v2r10 update
  - Bump version of OL8 STIG to V1R5
- various enhancements to SLE profiles
- scap-security-guide-UnicodeEncodeError-character-fix.patch: fixed upstream</changelog>
  <changelog author="meissner@suse.com" date="1690459200">- 0001-Revert-fix-aide-remediations-add-crontabs.patch:
  revert patch that breaks the SLE hardening (bsc#1213691)</changelog>
  <changelog author="meissner@suse.com" date="1690977600">- updated to 0.1.69 (jsc#ECO-3319)
  - Introduce a JSON build manifest (#10761)
  - Introduce a script to compare ComplianceAsCode versions (#10768)
  - Introduce CCN profiles for RHEL9 (#10860)
  - Map rules to components (#10609)
  - products/anolis23: supports Anolis OS 23 (#10548)
  - Render components to HTML (#10709)
  - Store rendered control files (#10656)
  - Test and use rules to components mapping (#10693)
  - Use distributed product properties (#10554)
- 0001-Revert-fix-aide-remediations-add-crontabs.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1697544000">- updated to 0.1.70 (jsc#ECO-3319)
  - Add openembedded distro support (#10793)
  - Remove DRAFT wording for OpenShift STIG (#11100)
  - Remove test-function-check_playbook_file_removed_and_added test (#10982)
  - scap-security-guide: Add Poky support (#11046)</changelog>
  <changelog author="meissner@suse.com" date="1701864000">- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)</changelog>
  <changelog author="meissner@suse.com" date="1702987200">- updated to 0.1.71 (jsc#ECO-3319)
  - Add RHEL 9 STIG
  - Add support for Debian 12
  - Update PCI-DSS profile for RHEL
  - lots of bugfixes and improvements for SLE
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69</changelog>
  <changelog author="meissner@suse.com" date="1707825600">- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream</changelog>
</package>
<package pkgid="b46b903fb9cc146120e94ae17e78a6dbca3966597e819e1109bdb2ecdf749153" name="sg3_utils" arch="aarch64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="7877601fd0f58cf84fee46fff9b008db6738f4c9b85a90084f197cfdae6ac17b" name="sg3_utils" arch="ppc64le">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="596fc385afc65c39f9cb5a3324d43561416e583ce52fd49a0194ea80bff26bb6" name="sg3_utils" arch="s390x">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="a51d57f897653b4d89b06ce771d152df276c4d1f70d921223db31bb5939bf158" name="sg3_utils" arch="src">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="00875c6eb07e76f347a9f8589543f99092163c4b80a4c5160af5c209e1705bf3" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.48+11.56e7b2f" rel="150600.3.3.11"/>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1667476800">- Update to new upstream version 1.48~20221101.6d3bd26:
  (pre-release sg3_utils-1.48 [20221101] [svn: r978])
  * sg_read_block_limits: fix granularity value, add --mloi option
  * sg_lib: add sg_ll_read_block_limits_v2(); sg_logs: json work
  * sg_stream_ctl: --get fix better; sg_rem_rest_elem: cleanup
  * sg_stream_ctl: fix --get indexing; fix some './configure --enable-debug' issues
  * sg_inq+sg_vpd: JSON updates
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option
  * Prepare for removing /proc/scsi from the Linux kernel
  * sg_inq+sg_vpd: merge VPD page processing
  * sg_get_elem_status: change '--maxlen=' option default to 1056 (was 32), other cleanups
  * sg_rep_zones: add experimental --json[=JO] option and generation
  * sg_logs: add --exclude and --undefined options
  * zoned disk man page improvements
  * sg_rep_zones: add --statistics option
  * sg_read_buffer: add --eh_code= and --no_output options
  * sg_format: allow disk formats on ZBC (zoned) disks
  * sg_rep_zones: add --brief option and --find ZT option
  * sg_rep_density: new utility for decoding the response of Report density support command [ssc (tape)]
  * Zoned block device characteristics VPD page support</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.48~20221101+1.142dace:
  * fix output of "sg_inq -H -p bdc" (boo#1207700)</changelog>
  <changelog author="mwilck@suse.com" date="1695297600">- Update to version 1.48
  * udev rules: new, configurable scheme for creating symlinks for SCSI devices
    (jsc#PED-6226)
    See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules
    and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules
  * decoding utilities: add -j/--json[=JO] and --js-file=JFN options
  * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer
  * sg_z_act_query: new tool for sending zone activate/query commands
  * sg_rem_rest_elem: new tool for removing or restoring elements
  * sg_write_attr: support for SPC "Write Attirbute" command (for tapes)
  * sg_ses: swap meaning of -H and -HH, add json support, use e.g.
    "0:2" for range indicator
  * sg_rtpg: fix response truncation
  * sg_decode_sense: add --nodecode option
  * sg_logs: fix --list and -lll options
  * sg_modes: improve handling of ZBC disks
  * sg_inq: add version descriptors from SPC6r08, add --quiet option
  * sg_vpd: add --sinq_inraw=RFN option
  * sg_turs: add --timeout= and --ascq= options
  * sg_requests: add --timeout= option
  * sg_sat_read_gplog: add --smart and --ppt options
  * sgp_dd and sgm_dd: add --progress option
  * sg_dd: add support for accessing NVMe devices via passthrough
  * Bug fixes and minor fixes
- _service: simplify version processing, as we have a clean upstream version again</changelog>
  <changelog author="mwilck@suse.com" date="1695816000">- dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226)
- spec file:
  * fix build dependencies for regenerate_initrd_posttrans
  (bsc#1215772)
  * add missing rules file</changelog>
  <changelog author="mwilck@suse.com" date="1695902400">- udev rules: allow kernel command line overrides with
  "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS"
  Try these boot parameters if your system fails to detect SCSI
  devices after update to sg3_utils 1.48.</changelog>
  <changelog author="mwilck@suse.com" date="1697457600">- rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)</changelog>
  <changelog author="mwilck@suse.com" date="1702641600">- udev rules: change default for ID_SERIAL and symlink creation
  back to "LTVS" for backward compatibility in SLE (jsc#PED-6226)
  Users who don't want to use e.g. serial number based device IDs
  for symlinks can set ENV{.SCSI_SYMLINK_SRC}="LTV".
  See /usr/lib/udev/00-scsi-sg3_config.rules for more information.</changelog>
  <changelog author="mwilck@suse.com" date="1704715200">- Upstream bug fixes for sg3_utils 1.48 (bsc#1218591)
  * sg_turs: fix missing CDB on several codepaths
  * sg_dd: fix bug that identified all block devices as NVME
  * rescan-scsi-bus.sh: avoid root FS going read-only with
    "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46)</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Fix spurious warning for non-SCSI devices (boo#1218666)
- Add 00-scsi-sg3_config.rules to dracut.conf (jsc#PED-6226, bsc#1219289)</changelog>
  <changelog author="mwilck@suse.com" date="1707825600">- Fix missing SCSI_MODEL and other fields for "sg_inq --export"
  (bsc#1219874)</changelog>
  <changelog author="mwilck@suse.com" date="1713528000">- sg_inq: re-add Unit serial number field (bsc#1219547)</changelog>
</package>
<package pkgid="8e1bd16d0a2b12f071c8caa733495e3fe0e332b0874e13e42f80504ddb74cb54" name="socat" arch="aarch64">
  <version epoch="0" ver="1.8.0.0" rel="150600.20.3.1"/>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
</package>
<package pkgid="e1daab89209efc3907017b5386b2f6822ec79959cc0455d4e468e76d28e15a68" name="socat" arch="ppc64le">
  <version epoch="0" ver="1.8.0.0" rel="150600.20.3.1"/>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
</package>
<package pkgid="4aa16020d2de05bc4adc9587bb7738c9ad6415119de4ae18052d7fd6e6d88457" name="socat" arch="s390x">
  <version epoch="0" ver="1.8.0.0" rel="150600.20.3.1"/>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
</package>
<package pkgid="3c461b24b22d2df84958f6fde4e660846501fa5e3dbee076a5c43c9b01bb18a1" name="socat" arch="src">
  <version epoch="0" ver="1.8.0.0" rel="150600.20.3.1"/>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
</package>
<package pkgid="1569b14bd98e384bf3c33b40f6235f76a8bc14fa5662ec9dba32841b148fad0f" name="socat" arch="x86_64">
  <version epoch="0" ver="1.8.0.0" rel="150600.20.3.1"/>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1535630400">- We HAVE_SSLv23_*_method, just not as functions, but macros
  add the relevant defines in the command line so support for
  autonegotiation of the highest TLS version is restored.</changelog>
  <changelog author="jengelh@inai.de" date="1536580800">- Replace old variables by modern counterparts.</changelog>
  <changelog author="mardnh@gmx.de" date="1554552000">- Update to version 1.7.3.3:
  * bugfix release, see the CHANGES file for all changes
- Drop patch:
  * socat-openssl-1.1-tests.patch (not longer needed)
- Run spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1580817600">- socat-common-fixes.patch: include tcpd.h where needed to fix
  - fno-common bsc#1160293</changelog>
  <changelog author="mpluskal@suse.com" date="1587124800">- Update to version 1.7.3.4:
  * bugfix release, see the CHANGES file for all changes
- Refresh patches:
  * socat-common-fixes.patch
  * socat-ignore-tests-failure-boo1078346.patch</changelog>
  <changelog author="dmueller@suse.com" date="1610366400">- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file</changelog>
  <changelog author="mardnh@gmx.de" date="1635768000">- Update to version 1.7.4.2:
  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file</changelog>
  <changelog author="dmueller@suse.com" date="1642852800">- update to 1.7.4.3:
  * fixes the TCP_INFO issue that broke building on non-Linux platforms.
  * building on AIX works again.
  * A few more corrections and improvements have been added</changelog>
  <changelog author="mliska@suse.cz" date="1649851200">- Use autosetup
- Add socat-fix-asan-error.patch that is offered to upstream
  and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'.</changelog>
  <changelog author="info@paolostivanin.com" date="1670328000">- Update to 1.7.4.4:
  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
   incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on "socat /tmp/x\"x/x -"
- Drop socat-fix-asan-error.patch</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1714564800">- Update to 1.8.0.0:
  * Support for network namespaces (option netns)
  * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
  * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
  * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
  * New script socat-mux.sh allows n-to-1 / 1-to-n communications
  * New script socat-broker.sh allows group communications
  * Experimental socks5 client feature
  * Address ACCEPT-FD for systemd "inetd" mode
  * UDP-Lite and DCCP address types
  * Addresses SOCKETPAIR and SHELL
  * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
  * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
  * Simple statistics output with Socat option --statistics and with SIGUSR1
  * A couple of new options, many fixes and corrections, see file CHANGES
- Drop socat-common-fixes.patch (no longer necessary)
- Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage)
- Add socat-test-dhparam fixture (reduce build load and time)
- Add socat-test-without-tty.patch for testing without tty.
- Note: This version introduces "socat1", linking to "socat"
- Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage</changelog>
</package>
<package pkgid="40b1622714b0ca80c258866f9563447f8df76c8ad393e17f5c537b30338e7843" name="squid" arch="aarch64">
  <version epoch="0" ver="6.9" rel="150600.3.3.2"/>
  <changelog author="adam.majer@suse.de" date="1648555200">- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch</changelog>
  <changelog author="adam.majer@suse.de" date="1648728000">- Do not try to set special permissions for basic_pam_auth (bsc#1197649)</changelog>
  <changelog author="adam.majer@suse.de" date="1656072000">- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request-&gt;pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts</changelog>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="chris@computersalat.de" date="1661774400">- fix PIDFile
  * NOT needed in service file
    (squid.service: Can't open PID file /run/squid.pid)
  * placed to tmpfilesdir</changelog>
  <changelog author="dmueller@suse.com" date="1662897600">- update to 5.7:
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
    (bsc#1203680, CVE-2022-41318)
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS auth module (NIS is deprecated and get's currently
  removed)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again as it survives tests now.</changelog>
  <changelog author="dmueller@suse.com" date="1680264000">- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing</changelog>
  <changelog author="adam.majer@suse.de" date="1683028800">- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)</changelog>
  <changelog author="adam.majer@suse.de" date="1683633600">- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning</changelog>
  <changelog author="info@paolostivanin.com" date="1691582400">- update to 6.2 (bsc#1217825, CVE-2023-49288, bsc#1216497):
  * Major UI changes:
  - Remove 8K limit for single access.log line
  - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
  - Add %transport::&gt;connection_id logformat code
  - Add paranoid_hit_validation directive
  - Report SMP store queues state (mgr:store_queues)
  - Addcache_log_message directive
  * Developer Interest changes:
  - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
  - Reject HTTP/1.0 requests with unusual framing
  - codespell check added to source maintenance enforcement
  - Streamlined ./configure handling of optional libraries
  - Add –progress option to test-builds.sh
  - Remove layer-00-bootstrap from test script
  - Convert LRU map into a CLP map
  - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
  - Remove unused cache_diff binary
  - Remove obsolete membanger test
  - Remove deprecated leakfinder (–enable-leakfinder)</changelog>
  <changelog author="adam.majer@suse.de" date="1695124800">- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]</changelog>
  <changelog author="adam.majer@suse.de" date="1698235200">- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
    + One-Byte Buffer OverRead in HTTP Request Header Parsing (bsc#1217274)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes</changelog>
  <changelog author="seanlew@opensuse.org" date="1703764800">- update to 6.6:
  - bug 5328: Fix ESI build with libxml2 v2.12.0
  - Bug 5319: QOS Netfilter MARK preservation is always disabled
  - Bug 5318: peer_digest.cc:399: "fetch-&gt;pd &amp;&amp; receivedData.data"
  - Bug 5317: FATAL attempt to read data from memory
  - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
  - FTP: Ignore credenials with a NUL-prefixed username
  - log_db_daemon: Fix DSN construction
  - Limit the number of allowed X-Forwarded-For hops (bsc#1217654, CVE-2023-50269)
  - Do not update StoreEntry expiration after errorAppendEntry()
  - improve handling of response sending errors (bsc#1219131, CVE-2024-23638)
- changes in 6.5:
  - Bug 5309: frequent "lowestOffset () &lt;= target_offset" assertion
  - Bug 4977: Remove mem_hdr::freeDataUpto() assertion
  - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
  - Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
  - Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1709726400">- update to 6.8
  - Fix marking of problematic cached IP addresses (#1691)
  - Bug 5344: mgr:config segfaults without logformat (#1680)
  - Fix infinite recursion when parsing HTTP chunks (#1553)
    (bsc#1216715, CVE-2024-25111)
- changes in 6.7
  - Bug 5337: workaround for crash on startup if -a option is used
  - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
  - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
  - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
  - Fix memory leak on SslBump certificates with Authority Key Identifier extension
  - Fix a possible integer overflow in FTP Gateway
  - Extend cache_log_message to Bug 5187 and job invalidation BUGs
  - Remove incorrect beta version warning
- squid.keyring: updated
- header_fixups.patch: added
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on
  client errors</changelog>
  <changelog author="adam.majer@suse.de" date="1716897600">- update to 6.9
  - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
  - Bug 5069: Keep listening after getsockname() error
  - Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
  - Reduce stale errno usage
  - Plug memory leak in handling cache manager requests
  - Fix error: template-id not allowed for constructor in C++20
  - Improve release packaging automation
- header_fixups.patch: upstreamed, removed
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed
- CVE-2024-33427.patch: fixes possible buffer overread leading to
  denial of service (bsc#1225417, CVE-2024-33427)</changelog>
</package>
<package pkgid="c4f3111be8a5c307d45918019444e0b832644a5e5daea147672cc5aeb49189cb" name="squid" arch="ppc64le">
  <version epoch="0" ver="6.9" rel="150600.3.3.2"/>
  <changelog author="adam.majer@suse.de" date="1648555200">- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch</changelog>
  <changelog author="adam.majer@suse.de" date="1648728000">- Do not try to set special permissions for basic_pam_auth (bsc#1197649)</changelog>
  <changelog author="adam.majer@suse.de" date="1656072000">- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request-&gt;pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts</changelog>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="chris@computersalat.de" date="1661774400">- fix PIDFile
  * NOT needed in service file
    (squid.service: Can't open PID file /run/squid.pid)
  * placed to tmpfilesdir</changelog>
  <changelog author="dmueller@suse.com" date="1662897600">- update to 5.7:
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
    (bsc#1203680, CVE-2022-41318)
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS auth module (NIS is deprecated and get's currently
  removed)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again as it survives tests now.</changelog>
  <changelog author="dmueller@suse.com" date="1680264000">- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing</changelog>
  <changelog author="adam.majer@suse.de" date="1683028800">- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)</changelog>
  <changelog author="adam.majer@suse.de" date="1683633600">- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning</changelog>
  <changelog author="info@paolostivanin.com" date="1691582400">- update to 6.2 (bsc#1217825, CVE-2023-49288, bsc#1216497):
  * Major UI changes:
  - Remove 8K limit for single access.log line
  - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
  - Add %transport::&gt;connection_id logformat code
  - Add paranoid_hit_validation directive
  - Report SMP store queues state (mgr:store_queues)
  - Addcache_log_message directive
  * Developer Interest changes:
  - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
  - Reject HTTP/1.0 requests with unusual framing
  - codespell check added to source maintenance enforcement
  - Streamlined ./configure handling of optional libraries
  - Add –progress option to test-builds.sh
  - Remove layer-00-bootstrap from test script
  - Convert LRU map into a CLP map
  - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
  - Remove unused cache_diff binary
  - Remove obsolete membanger test
  - Remove deprecated leakfinder (–enable-leakfinder)</changelog>
  <changelog author="adam.majer@suse.de" date="1695124800">- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]</changelog>
  <changelog author="adam.majer@suse.de" date="1698235200">- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
    + One-Byte Buffer OverRead in HTTP Request Header Parsing (bsc#1217274)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes</changelog>
  <changelog author="seanlew@opensuse.org" date="1703764800">- update to 6.6:
  - bug 5328: Fix ESI build with libxml2 v2.12.0
  - Bug 5319: QOS Netfilter MARK preservation is always disabled
  - Bug 5318: peer_digest.cc:399: "fetch-&gt;pd &amp;&amp; receivedData.data"
  - Bug 5317: FATAL attempt to read data from memory
  - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
  - FTP: Ignore credenials with a NUL-prefixed username
  - log_db_daemon: Fix DSN construction
  - Limit the number of allowed X-Forwarded-For hops (bsc#1217654, CVE-2023-50269)
  - Do not update StoreEntry expiration after errorAppendEntry()
  - improve handling of response sending errors (bsc#1219131, CVE-2024-23638)
- changes in 6.5:
  - Bug 5309: frequent "lowestOffset () &lt;= target_offset" assertion
  - Bug 4977: Remove mem_hdr::freeDataUpto() assertion
  - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
  - Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
  - Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1709726400">- update to 6.8
  - Fix marking of problematic cached IP addresses (#1691)
  - Bug 5344: mgr:config segfaults without logformat (#1680)
  - Fix infinite recursion when parsing HTTP chunks (#1553)
    (bsc#1216715, CVE-2024-25111)
- changes in 6.7
  - Bug 5337: workaround for crash on startup if -a option is used
  - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
  - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
  - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
  - Fix memory leak on SslBump certificates with Authority Key Identifier extension
  - Fix a possible integer overflow in FTP Gateway
  - Extend cache_log_message to Bug 5187 and job invalidation BUGs
  - Remove incorrect beta version warning
- squid.keyring: updated
- header_fixups.patch: added
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on
  client errors</changelog>
  <changelog author="adam.majer@suse.de" date="1716897600">- update to 6.9
  - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
  - Bug 5069: Keep listening after getsockname() error
  - Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
  - Reduce stale errno usage
  - Plug memory leak in handling cache manager requests
  - Fix error: template-id not allowed for constructor in C++20
  - Improve release packaging automation
- header_fixups.patch: upstreamed, removed
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed
- CVE-2024-33427.patch: fixes possible buffer overread leading to
  denial of service (bsc#1225417, CVE-2024-33427)</changelog>
</package>
<package pkgid="3941132510710be7db18a5e1ae2f2bb95e6df3983ba4724947e42a6e4f5671dd" name="squid" arch="s390x">
  <version epoch="0" ver="6.9" rel="150600.3.3.2"/>
  <changelog author="adam.majer@suse.de" date="1648555200">- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch</changelog>
  <changelog author="adam.majer@suse.de" date="1648728000">- Do not try to set special permissions for basic_pam_auth (bsc#1197649)</changelog>
  <changelog author="adam.majer@suse.de" date="1656072000">- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request-&gt;pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts</changelog>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="chris@computersalat.de" date="1661774400">- fix PIDFile
  * NOT needed in service file
    (squid.service: Can't open PID file /run/squid.pid)
  * placed to tmpfilesdir</changelog>
  <changelog author="dmueller@suse.com" date="1662897600">- update to 5.7:
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
    (bsc#1203680, CVE-2022-41318)
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS auth module (NIS is deprecated and get's currently
  removed)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again as it survives tests now.</changelog>
  <changelog author="dmueller@suse.com" date="1680264000">- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing</changelog>
  <changelog author="adam.majer@suse.de" date="1683028800">- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)</changelog>
  <changelog author="adam.majer@suse.de" date="1683633600">- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning</changelog>
  <changelog author="info@paolostivanin.com" date="1691582400">- update to 6.2 (bsc#1217825, CVE-2023-49288, bsc#1216497):
  * Major UI changes:
  - Remove 8K limit for single access.log line
  - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
  - Add %transport::&gt;connection_id logformat code
  - Add paranoid_hit_validation directive
  - Report SMP store queues state (mgr:store_queues)
  - Addcache_log_message directive
  * Developer Interest changes:
  - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
  - Reject HTTP/1.0 requests with unusual framing
  - codespell check added to source maintenance enforcement
  - Streamlined ./configure handling of optional libraries
  - Add –progress option to test-builds.sh
  - Remove layer-00-bootstrap from test script
  - Convert LRU map into a CLP map
  - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
  - Remove unused cache_diff binary
  - Remove obsolete membanger test
  - Remove deprecated leakfinder (–enable-leakfinder)</changelog>
  <changelog author="adam.majer@suse.de" date="1695124800">- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]</changelog>
  <changelog author="adam.majer@suse.de" date="1698235200">- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
    + One-Byte Buffer OverRead in HTTP Request Header Parsing (bsc#1217274)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes</changelog>
  <changelog author="seanlew@opensuse.org" date="1703764800">- update to 6.6:
  - bug 5328: Fix ESI build with libxml2 v2.12.0
  - Bug 5319: QOS Netfilter MARK preservation is always disabled
  - Bug 5318: peer_digest.cc:399: "fetch-&gt;pd &amp;&amp; receivedData.data"
  - Bug 5317: FATAL attempt to read data from memory
  - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
  - FTP: Ignore credenials with a NUL-prefixed username
  - log_db_daemon: Fix DSN construction
  - Limit the number of allowed X-Forwarded-For hops (bsc#1217654, CVE-2023-50269)
  - Do not update StoreEntry expiration after errorAppendEntry()
  - improve handling of response sending errors (bsc#1219131, CVE-2024-23638)
- changes in 6.5:
  - Bug 5309: frequent "lowestOffset () &lt;= target_offset" assertion
  - Bug 4977: Remove mem_hdr::freeDataUpto() assertion
  - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
  - Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
  - Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1709726400">- update to 6.8
  - Fix marking of problematic cached IP addresses (#1691)
  - Bug 5344: mgr:config segfaults without logformat (#1680)
  - Fix infinite recursion when parsing HTTP chunks (#1553)
    (bsc#1216715, CVE-2024-25111)
- changes in 6.7
  - Bug 5337: workaround for crash on startup if -a option is used
  - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
  - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
  - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
  - Fix memory leak on SslBump certificates with Authority Key Identifier extension
  - Fix a possible integer overflow in FTP Gateway
  - Extend cache_log_message to Bug 5187 and job invalidation BUGs
  - Remove incorrect beta version warning
- squid.keyring: updated
- header_fixups.patch: added
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on
  client errors</changelog>
  <changelog author="adam.majer@suse.de" date="1716897600">- update to 6.9
  - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
  - Bug 5069: Keep listening after getsockname() error
  - Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
  - Reduce stale errno usage
  - Plug memory leak in handling cache manager requests
  - Fix error: template-id not allowed for constructor in C++20
  - Improve release packaging automation
- header_fixups.patch: upstreamed, removed
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed
- CVE-2024-33427.patch: fixes possible buffer overread leading to
  denial of service (bsc#1225417, CVE-2024-33427)</changelog>
</package>
<package pkgid="19bb62c4ef3584e5cd4ae0dfdd1d87de22496001cdd934f3a4900fcd55ac4ec0" name="squid" arch="src">
  <version epoch="0" ver="6.9" rel="150600.3.3.2"/>
  <changelog author="adam.majer@suse.de" date="1648555200">- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch</changelog>
  <changelog author="adam.majer@suse.de" date="1648728000">- Do not try to set special permissions for basic_pam_auth (bsc#1197649)</changelog>
  <changelog author="adam.majer@suse.de" date="1656072000">- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request-&gt;pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts</changelog>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="chris@computersalat.de" date="1661774400">- fix PIDFile
  * NOT needed in service file
    (squid.service: Can't open PID file /run/squid.pid)
  * placed to tmpfilesdir</changelog>
  <changelog author="dmueller@suse.com" date="1662897600">- update to 5.7:
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
    (bsc#1203680, CVE-2022-41318)
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS auth module (NIS is deprecated and get's currently
  removed)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again as it survives tests now.</changelog>
  <changelog author="dmueller@suse.com" date="1680264000">- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing</changelog>
  <changelog author="adam.majer@suse.de" date="1683028800">- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)</changelog>
  <changelog author="adam.majer@suse.de" date="1683633600">- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning</changelog>
  <changelog author="info@paolostivanin.com" date="1691582400">- update to 6.2 (bsc#1217825, CVE-2023-49288, bsc#1216497):
  * Major UI changes:
  - Remove 8K limit for single access.log line
  - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
  - Add %transport::&gt;connection_id logformat code
  - Add paranoid_hit_validation directive
  - Report SMP store queues state (mgr:store_queues)
  - Addcache_log_message directive
  * Developer Interest changes:
  - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
  - Reject HTTP/1.0 requests with unusual framing
  - codespell check added to source maintenance enforcement
  - Streamlined ./configure handling of optional libraries
  - Add –progress option to test-builds.sh
  - Remove layer-00-bootstrap from test script
  - Convert LRU map into a CLP map
  - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
  - Remove unused cache_diff binary
  - Remove obsolete membanger test
  - Remove deprecated leakfinder (–enable-leakfinder)</changelog>
  <changelog author="adam.majer@suse.de" date="1695124800">- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]</changelog>
  <changelog author="adam.majer@suse.de" date="1698235200">- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
    + One-Byte Buffer OverRead in HTTP Request Header Parsing (bsc#1217274)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes</changelog>
  <changelog author="seanlew@opensuse.org" date="1703764800">- update to 6.6:
  - bug 5328: Fix ESI build with libxml2 v2.12.0
  - Bug 5319: QOS Netfilter MARK preservation is always disabled
  - Bug 5318: peer_digest.cc:399: "fetch-&gt;pd &amp;&amp; receivedData.data"
  - Bug 5317: FATAL attempt to read data from memory
  - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
  - FTP: Ignore credenials with a NUL-prefixed username
  - log_db_daemon: Fix DSN construction
  - Limit the number of allowed X-Forwarded-For hops (bsc#1217654, CVE-2023-50269)
  - Do not update StoreEntry expiration after errorAppendEntry()
  - improve handling of response sending errors (bsc#1219131, CVE-2024-23638)
- changes in 6.5:
  - Bug 5309: frequent "lowestOffset () &lt;= target_offset" assertion
  - Bug 4977: Remove mem_hdr::freeDataUpto() assertion
  - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
  - Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
  - Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1709726400">- update to 6.8
  - Fix marking of problematic cached IP addresses (#1691)
  - Bug 5344: mgr:config segfaults without logformat (#1680)
  - Fix infinite recursion when parsing HTTP chunks (#1553)
    (bsc#1216715, CVE-2024-25111)
- changes in 6.7
  - Bug 5337: workaround for crash on startup if -a option is used
  - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
  - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
  - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
  - Fix memory leak on SslBump certificates with Authority Key Identifier extension
  - Fix a possible integer overflow in FTP Gateway
  - Extend cache_log_message to Bug 5187 and job invalidation BUGs
  - Remove incorrect beta version warning
- squid.keyring: updated
- header_fixups.patch: added
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on
  client errors</changelog>
  <changelog author="adam.majer@suse.de" date="1716897600">- update to 6.9
  - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
  - Bug 5069: Keep listening after getsockname() error
  - Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
  - Reduce stale errno usage
  - Plug memory leak in handling cache manager requests
  - Fix error: template-id not allowed for constructor in C++20
  - Improve release packaging automation
- header_fixups.patch: upstreamed, removed
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed
- CVE-2024-33427.patch: fixes possible buffer overread leading to
  denial of service (bsc#1225417, CVE-2024-33427)</changelog>
</package>
<package pkgid="0ab2f1a7ebdec219c79814da9758a5ae573faf20c36185b2276c1229ba16f8bb" name="squid" arch="x86_64">
  <version epoch="0" ver="6.9" rel="150600.3.3.2"/>
  <changelog author="adam.majer@suse.de" date="1648555200">- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch</changelog>
  <changelog author="adam.majer@suse.de" date="1648728000">- Do not try to set special permissions for basic_pam_auth (bsc#1197649)</changelog>
  <changelog author="adam.majer@suse.de" date="1656072000">- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request-&gt;pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts</changelog>
  <changelog author="schubi@suse.com" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="chris@computersalat.de" date="1661774400">- fix PIDFile
  * NOT needed in service file
    (squid.service: Can't open PID file /run/squid.pid)
  * placed to tmpfilesdir</changelog>
  <changelog author="dmueller@suse.com" date="1662897600">- update to 5.7:
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
    (bsc#1203680, CVE-2022-41318)
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kukuk@suse.com" date="1674648000">- Disable NIS auth module (NIS is deprecated and get's currently
  removed)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO again as it survives tests now.</changelog>
  <changelog author="dmueller@suse.com" date="1680264000">- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing</changelog>
  <changelog author="adam.majer@suse.de" date="1683028800">- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)</changelog>
  <changelog author="adam.majer@suse.de" date="1683633600">- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning</changelog>
  <changelog author="info@paolostivanin.com" date="1691582400">- update to 6.2 (bsc#1217825, CVE-2023-49288, bsc#1216497):
  * Major UI changes:
  - Remove 8K limit for single access.log line
  - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
  - Add %transport::&gt;connection_id logformat code
  - Add paranoid_hit_validation directive
  - Report SMP store queues state (mgr:store_queues)
  - Addcache_log_message directive
  * Developer Interest changes:
  - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
  - Reject HTTP/1.0 requests with unusual framing
  - codespell check added to source maintenance enforcement
  - Streamlined ./configure handling of optional libraries
  - Add –progress option to test-builds.sh
  - Remove layer-00-bootstrap from test script
  - Convert LRU map into a CLP map
  - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
  - Remove unused cache_diff binary
  - Remove obsolete membanger test
  - Remove deprecated leakfinder (–enable-leakfinder)</changelog>
  <changelog author="adam.majer@suse.de" date="1695124800">- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]</changelog>
  <changelog author="adam.majer@suse.de" date="1698235200">- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
    + One-Byte Buffer OverRead in HTTP Request Header Parsing (bsc#1217274)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes</changelog>
  <changelog author="seanlew@opensuse.org" date="1703764800">- update to 6.6:
  - bug 5328: Fix ESI build with libxml2 v2.12.0
  - Bug 5319: QOS Netfilter MARK preservation is always disabled
  - Bug 5318: peer_digest.cc:399: "fetch-&gt;pd &amp;&amp; receivedData.data"
  - Bug 5317: FATAL attempt to read data from memory
  - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
  - FTP: Ignore credenials with a NUL-prefixed username
  - log_db_daemon: Fix DSN construction
  - Limit the number of allowed X-Forwarded-For hops (bsc#1217654, CVE-2023-50269)
  - Do not update StoreEntry expiration after errorAppendEntry()
  - improve handling of response sending errors (bsc#1219131, CVE-2024-23638)
- changes in 6.5:
  - Bug 5309: frequent "lowestOffset () &lt;= target_offset" assertion
  - Bug 4977: Remove mem_hdr::freeDataUpto() assertion
  - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
  - Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
  - Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1709726400">- update to 6.8
  - Fix marking of problematic cached IP addresses (#1691)
  - Bug 5344: mgr:config segfaults without logformat (#1680)
  - Fix infinite recursion when parsing HTTP chunks (#1553)
    (bsc#1216715, CVE-2024-25111)
- changes in 6.7
  - Bug 5337: workaround for crash on startup if -a option is used
  - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
  - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
  - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
  - Fix memory leak on SslBump certificates with Authority Key Identifier extension
  - Fix a possible integer overflow in FTP Gateway
  - Extend cache_log_message to Bug 5187 and job invalidation BUGs
  - Remove incorrect beta version warning
- squid.keyring: updated
- header_fixups.patch: added
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on
  client errors</changelog>
  <changelog author="adam.majer@suse.de" date="1716897600">- update to 6.9
  - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
  - Bug 5069: Keep listening after getsockname() error
  - Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
  - Reduce stale errno usage
  - Plug memory leak in handling cache manager requests
  - Fix error: template-id not allowed for constructor in C++20
  - Improve release packaging automation
- header_fixups.patch: upstreamed, removed
- 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed
- CVE-2024-33427.patch: fixes possible buffer overread leading to
  denial of service (bsc#1225417, CVE-2024-33427)</changelog>
</package>
<package pkgid="340076bf6541441908bee5fa49523d7d4838589216c2008d3f95bdf0ebe1d164" name="sssd" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="29669ace7fe6abb26f0ba899bda298eed7352e14e6b362a2a31c63fa21ff2b19" name="sssd" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="9f97b1da72ca18ebfd615e67177b9c5e2a9fcba46601496c306a5e496347c38f" name="sssd" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="bacc7d548a39c52056243226e821c2816c7253280f5b9e581725ac2ca1679656" name="sssd" arch="src">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="1c659b4c6473d77eef36ccb04a4e2765e6b78660f47b3a15c853a4bbbefb3376" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="1787869545f4100af79f4f0aa1a5fa5ada1b0ac8e03395e1fa36dbad361b0c76" name="sssd-ad" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="d88af7c507a5f2ab4d3af262e29359b37bd98df9c4be0eecf462700d65421962" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="27656582863d34b92731edec7528b38c32fc61d91d49e18098b635ac387ac586" name="sssd-ad" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="afdd4a8a1e54ac8bb9ce46b7cf7bee1a668c5c4d2aaf77ad444d8dcbe6c5d811" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="726ea44ae0f9b7bfb4208767a6ef9c0a490792f4c04d921deba90737c4e64fd9" name="sssd-dbus" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="615efdc8ec0775be392df1a712c0f2267bb2c1feea23317c57573088519b6302" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="6d27271a7a1bd1903bff02213f2e07dac12e7ee27726ff18b785b87983808977" name="sssd-dbus" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="98187da4586f786ec8d0d9272dd16850f2a3ad0664106e7ccff2e93ebd43651d" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="b4f75fad34ded02fad6d733920826b3233facc5f72871558ac55fc9b226558b6" name="sssd-ipa" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="be27ccfc7eac8d84cc210f942ff368a95353f927fa581db296a77ee821b3e1c8" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="9b535998f03ec6e1ba10bb6d789ce5cccd10cd338d915cedd0cf2775375f08c1" name="sssd-ipa" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="077c6bfb481b60462f6c16089a587fe1b6066195960585e53505e7558a34b00a" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="bef83013b3715e259475de0dbca3f4c34bae1a5c6d526f4d37305afbb7e67994" name="sssd-kcm" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="fd49488beae6180a03fadda3ff56b89c8fc693fa0e07604f29167288f8707166" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="e8ecb66cc720342051a8803715afbd9d43ecef9eea87cfe9cfc1dde33a2ba4a7" name="sssd-kcm" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ee12d161419c5ae29cc9af0e05ee174b76c65b5910e5caf5b68ae49fa8e08ba5" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="7b6641a83804716f6374f5f2b7c50f010a5f9f643b92798c002b726a9b82f83a" name="sssd-krb5" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="c94b53dae6f36aecf4c84abf4057a62876059b8573b0a17ac7df96f96b7b44ad" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="d46029f8311e0f03dfd17d79195147c7b79d181e5a8048b3fa84924007c8fc12" name="sssd-krb5" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="0410fa45e9c011a5eb86cf113277faa1b582d79c220136b242b4cb1829fba2bb" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="837db4cd70301efb0f599275c20e1392f79081fcd6a25f4e1c988e4bd0edf331" name="sssd-krb5-common" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="25dc8bb99668fb469060eef152b44814c9a8857cc6e338609ec749ea00acf542" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="d23e67416d667dbd806339bb65b497fad15391d955276f9d2daf7f612d686ea3" name="sssd-krb5-common" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="1765f138f6b16815d6f7975ead4aa6b197e13eca6a29ced68f4ae8c731b6b11c" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="298a1b785ff203d2f4f8ff809c7dec747a7373a76dedc274431ade78b8cc47d6" name="sssd-ldap" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="206f8653f06b04c11a42b22a4cd0cd959d1e5c68e3956a05d39a7cf32af6e7ab" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="af7605b9890d1dd6892cc63045a004248a8f7be9359b4cba95a9c852cdd68d30" name="sssd-ldap" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="37862b93794a6d2c9457d2e8d9506c825901e428636f0c413e29035f32c054ca" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="2f0fd0f80d4f95b282ac93686c7f97d0eca5fb31e4ee30f6c41d00923551d4c1" name="sssd-proxy" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="71da8661a41b97f0d7ac86152db72fecb799ee1efc0f88408baec5d610850808" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="772276888edca1f214f3503fcede975e649cdae15e0fe73048a32c7c90f92510" name="sssd-proxy" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="23a92c5eb6e65c50ad13792d963c455a45aadeb13fc4af13e21ee09c0347d7e8" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="1185b56b9359de42faec6834ec0dd474324cb512401f74eadf02f2907a19f0a0" name="sssd-tools" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="ce44aa790f46af98e1002d243a474813c49a888251e22ae923514e4c82d1ca01" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="de27f94aa90ebab06722acae8b8e7e2585e3f752496fb09475cff0166d6956bd" name="sssd-tools" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8aa6432226bd5f6205813407f4638a80fab9ec7ff351b2914d2d7aedd7a4c50d" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4cb11688654f5c7830fb8f30eb48672b49dcaa5728cb1503608edfb1ce169921" name="sssd-winbind-idmap" arch="aarch64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="892f70f407f9eeb9b5ccb9593abfdf65010a77a9b3e33ecda0fc4e9631731fe8" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="f63c5b5959455004bf75e0b3142ceb8f01dd14f497a303d729cf14d9630b49ce" name="sssd-winbind-idmap" arch="s390x">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="8035cfaafdeb7c644385e71c746cdde8a3ff5fc34166fec03daaf80dc8e62fe0" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150600.3.3.1"/>
  <changelog author="schubi@suse.com" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jengelh@inai.de" date="1665144000">- Update to release 2.8.0
  * Introduced the dbus function
    org.freedesktop.sssd.infopipe.Users.ListByAttr(attr, value,
    limit) listing upto limit users matching the filter
    attr=value.
  * sssctl is now able to create, list and delete indexes on the
    local caches. Indexes are useful for the new D-Bus
    ListByAttr() function.
  * sssctl is now able to read and set each component's debug
    level independently.
  * A number of new configuration options are available,
    cf. https://sssd.io/release-notes/sssd-2.8.0.html .
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559); Drop SLE patch
    0001-Fix-sdap_access_host-No-matching-host-rule-found.patch
  * Accept krb5 1.20 for building the PAC plugin; Drop SLE patch
    0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="jengelh@inai.de" date="1667563200">- Update to release 2.8.1
  * A regression when running sss_cache when no SSSD domain is
    enabled would produce a syslog critical message was fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1670760000">- Update to release 2.8.2
  * New mapping template for serial number, subject key id, SID,
    certificate hashes and DN components are added to
    libsss_certmap.</changelog>
  <changelog author="jengelh@inai.de" date="1671624000">- Take systemd units off the restart list that have
  RefuseManualStart=yes [boo#1206592]
- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]</changelog>
  <changelog author="schubi@suse.com" date="1672747200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207586)</changelog>
  <changelog author="jengelh@inai.de" date="1683288000">- Update to release 2.9
  * The sss_simpleifp library is deprecated (and for openSUSE,
    already removed)
  * The "Files provider" (i.e. id_provider = files) is deprecated
    (and for openSUSE, already removed)
  * SSSD will no longer warn about changed defaults when using
    ldap_schema = rfc2307 and default autofs mapping.
  * New passkey functionality, which will allow the use of FIDO2
    compliant devices to authenticate a centrally managed user
    locally.
  * Add support for ldapi:// URLs to allow connections to local
    LDAP servers.
  * NSS IDMAP has two new methods: getsidbyusername and
    getsidbygroupname.</changelog>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="5afc4d18e727c4b7c627222bd0da8ad0dd984d26d46cb3531bec805619473e57" name="suse-module-tools" arch="aarch64">
  <version epoch="0" ver="15.6.9" rel="150600.3.3.3"/>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1692100800">- Update to version 15.6.1:
  * change wording in filesystem blacklist files
    (gh#openSUSE/suse-module-tools#71)
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * Drop support for usrmerged distro (boo#1206798)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * rpm-script: skip run_bootloader check (boo#1208117)
  * get rid of weak-modules (bsc#1202353)
  * Remove last mentions of mkinitrd
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1201066, bsc#1213428)
  * weak-modules2: only use kernel version under /run/regenerate-initrd
    (boo#1201387)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.6.2:
  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
    (bsc#1214877)</changelog>
  <changelog author="mwilck@suse.com" date="1695988800">- Update to version 15.6.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)</changelog>
  <changelog author="mwilck@suse.com" date="1700654400">- Update to version 15.6.4:
  * modprobe.d: use softdep to load sd_mod and sg (bsc#1206070)</changelog>
  <changelog author="mwilck@suse.com" date="1702555200">- Update to version 15.6.5:
  * Add more modules to file system blacklist (jsc#PED-6167)
    Blacklisted filesystem modules that aren't officially supported
    by SUSE: f2fs, hfsplus, jfss2, kafs, ntfs3, orangefs, pstore, romfs, zonefs.
    This affects Leap and SLED only, as these modules aren't shipped
    for SLE anyway. As usual, the blacklist entries can be removed
    by running an explicit "modrobe $FS_MODULE" command.</changelog>
  <changelog author="mwilck@suse.com" date="1702900800">- Update to version 15.6.6:
  * add blacklist entry for reiserfs (jsc#PED-6167)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.6.7:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
  <changelog author="mwilck@suse.com" date="1707134400">- Update to version 15.6.8:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
    (boo#1217979)
  * Don't rebuild existing initramfs images if the environment variable
    SKIP_REGENERATE_ALL=1 is set (boo#1192014)</changelog>
  <changelog author="mwilck@suse.com" date="1716379200">- Update to version 15.6.9:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
  * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)
  * README: Update blacklist description (gh#openSUSE/suse-module-tools#71)</changelog>
</package>
<package pkgid="a723470a986e67bff608ae9ac0185662377c6e09f33775e94e5a1faefe0d0878" name="suse-module-tools" arch="ppc64le">
  <version epoch="0" ver="15.6.9" rel="150600.3.3.3"/>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1692100800">- Update to version 15.6.1:
  * change wording in filesystem blacklist files
    (gh#openSUSE/suse-module-tools#71)
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * Drop support for usrmerged distro (boo#1206798)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * rpm-script: skip run_bootloader check (boo#1208117)
  * get rid of weak-modules (bsc#1202353)
  * Remove last mentions of mkinitrd
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1201066, bsc#1213428)
  * weak-modules2: only use kernel version under /run/regenerate-initrd
    (boo#1201387)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.6.2:
  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
    (bsc#1214877)</changelog>
  <changelog author="mwilck@suse.com" date="1695988800">- Update to version 15.6.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)</changelog>
  <changelog author="mwilck@suse.com" date="1700654400">- Update to version 15.6.4:
  * modprobe.d: use softdep to load sd_mod and sg (bsc#1206070)</changelog>
  <changelog author="mwilck@suse.com" date="1702555200">- Update to version 15.6.5:
  * Add more modules to file system blacklist (jsc#PED-6167)
    Blacklisted filesystem modules that aren't officially supported
    by SUSE: f2fs, hfsplus, jfss2, kafs, ntfs3, orangefs, pstore, romfs, zonefs.
    This affects Leap and SLED only, as these modules aren't shipped
    for SLE anyway. As usual, the blacklist entries can be removed
    by running an explicit "modrobe $FS_MODULE" command.</changelog>
  <changelog author="mwilck@suse.com" date="1702900800">- Update to version 15.6.6:
  * add blacklist entry for reiserfs (jsc#PED-6167)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.6.7:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
  <changelog author="mwilck@suse.com" date="1707134400">- Update to version 15.6.8:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
    (boo#1217979)
  * Don't rebuild existing initramfs images if the environment variable
    SKIP_REGENERATE_ALL=1 is set (boo#1192014)</changelog>
  <changelog author="mwilck@suse.com" date="1716379200">- Update to version 15.6.9:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
  * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)
  * README: Update blacklist description (gh#openSUSE/suse-module-tools#71)</changelog>
</package>
<package pkgid="91cd6855fea5f9e1a40d06a57a5b1739d1fa923b9300c45c8d6753031046e7ff" name="suse-module-tools" arch="s390x">
  <version epoch="0" ver="15.6.9" rel="150600.3.3.3"/>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1692100800">- Update to version 15.6.1:
  * change wording in filesystem blacklist files
    (gh#openSUSE/suse-module-tools#71)
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * Drop support for usrmerged distro (boo#1206798)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * rpm-script: skip run_bootloader check (boo#1208117)
  * get rid of weak-modules (bsc#1202353)
  * Remove last mentions of mkinitrd
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1201066, bsc#1213428)
  * weak-modules2: only use kernel version under /run/regenerate-initrd
    (boo#1201387)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.6.2:
  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
    (bsc#1214877)</changelog>
  <changelog author="mwilck@suse.com" date="1695988800">- Update to version 15.6.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)</changelog>
  <changelog author="mwilck@suse.com" date="1700654400">- Update to version 15.6.4:
  * modprobe.d: use softdep to load sd_mod and sg (bsc#1206070)</changelog>
  <changelog author="mwilck@suse.com" date="1702555200">- Update to version 15.6.5:
  * Add more modules to file system blacklist (jsc#PED-6167)
    Blacklisted filesystem modules that aren't officially supported
    by SUSE: f2fs, hfsplus, jfss2, kafs, ntfs3, orangefs, pstore, romfs, zonefs.
    This affects Leap and SLED only, as these modules aren't shipped
    for SLE anyway. As usual, the blacklist entries can be removed
    by running an explicit "modrobe $FS_MODULE" command.</changelog>
  <changelog author="mwilck@suse.com" date="1702900800">- Update to version 15.6.6:
  * add blacklist entry for reiserfs (jsc#PED-6167)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.6.7:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
  <changelog author="mwilck@suse.com" date="1707134400">- Update to version 15.6.8:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
    (boo#1217979)
  * Don't rebuild existing initramfs images if the environment variable
    SKIP_REGENERATE_ALL=1 is set (boo#1192014)</changelog>
  <changelog author="mwilck@suse.com" date="1716379200">- Update to version 15.6.9:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
  * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)
  * README: Update blacklist description (gh#openSUSE/suse-module-tools#71)</changelog>
</package>
<package pkgid="28a65c7eb650a2dfefd4253c9971a5a02a169374e018183b4296b2856e176ef4" name="suse-module-tools" arch="src">
  <version epoch="0" ver="15.6.9" rel="150600.3.3.3"/>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1692100800">- Update to version 15.6.1:
  * change wording in filesystem blacklist files
    (gh#openSUSE/suse-module-tools#71)
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * Drop support for usrmerged distro (boo#1206798)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * rpm-script: skip run_bootloader check (boo#1208117)
  * get rid of weak-modules (bsc#1202353)
  * Remove last mentions of mkinitrd
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1201066, bsc#1213428)
  * weak-modules2: only use kernel version under /run/regenerate-initrd
    (boo#1201387)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.6.2:
  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
    (bsc#1214877)</changelog>
  <changelog author="mwilck@suse.com" date="1695988800">- Update to version 15.6.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)</changelog>
  <changelog author="mwilck@suse.com" date="1700654400">- Update to version 15.6.4:
  * modprobe.d: use softdep to load sd_mod and sg (bsc#1206070)</changelog>
  <changelog author="mwilck@suse.com" date="1702555200">- Update to version 15.6.5:
  * Add more modules to file system blacklist (jsc#PED-6167)
    Blacklisted filesystem modules that aren't officially supported
    by SUSE: f2fs, hfsplus, jfss2, kafs, ntfs3, orangefs, pstore, romfs, zonefs.
    This affects Leap and SLED only, as these modules aren't shipped
    for SLE anyway. As usual, the blacklist entries can be removed
    by running an explicit "modrobe $FS_MODULE" command.</changelog>
  <changelog author="mwilck@suse.com" date="1702900800">- Update to version 15.6.6:
  * add blacklist entry for reiserfs (jsc#PED-6167)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.6.7:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
  <changelog author="mwilck@suse.com" date="1707134400">- Update to version 15.6.8:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
    (boo#1217979)
  * Don't rebuild existing initramfs images if the environment variable
    SKIP_REGENERATE_ALL=1 is set (boo#1192014)</changelog>
  <changelog author="mwilck@suse.com" date="1716379200">- Update to version 15.6.9:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
  * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)
  * README: Update blacklist description (gh#openSUSE/suse-module-tools#71)</changelog>
</package>
<package pkgid="6fc1311b957c57ccc265a14e78d9a324a833e87ae08e11afa00f81a69c294e29" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="15.6.9" rel="150600.3.3.3"/>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 15.5.0:
  * version adapted, code is identical to 15.4.15</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.5.1:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
  <changelog author="mwilck@suse.com" date="1692100800">- Update to version 15.6.1:
  * change wording in filesystem blacklist files
    (gh#openSUSE/suse-module-tools#71)
  * rpm-script: update bootloader after creating initramfs
    (boo#1213822)
  * Drop support for usrmerged distro (boo#1206798)
  * rpm-script: check for regenerate-initrd-posttrans in %posttrans
    (boo#1212957)
  * rpm-script: skip run_bootloader check (boo#1208117)
  * get rid of weak-modules (bsc#1202353)
  * Remove last mentions of mkinitrd
  * cert-script: skip cert handling if efivarfs is not writable
    (bsc#1201066, bsc#1213428)
  * weak-modules2: only use kernel version under /run/regenerate-initrd
    (boo#1201387)</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- Update to version 15.6.2:
  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
    (bsc#1214877)</changelog>
  <changelog author="mwilck@suse.com" date="1695988800">- Update to version 15.6.3:
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731, CVE-2023-23559)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)</changelog>
  <changelog author="mwilck@suse.com" date="1700654400">- Update to version 15.6.4:
  * modprobe.d: use softdep to load sd_mod and sg (bsc#1206070)</changelog>
  <changelog author="mwilck@suse.com" date="1702555200">- Update to version 15.6.5:
  * Add more modules to file system blacklist (jsc#PED-6167)
    Blacklisted filesystem modules that aren't officially supported
    by SUSE: f2fs, hfsplus, jfss2, kafs, ntfs3, orangefs, pstore, romfs, zonefs.
    This affects Leap and SLED only, as these modules aren't shipped
    for SLE anyway. As usual, the blacklist entries can be removed
    by running an explicit "modrobe $FS_MODULE" command.</changelog>
  <changelog author="mwilck@suse.com" date="1702900800">- Update to version 15.6.6:
  * add blacklist entry for reiserfs (jsc#PED-6167)</changelog>
  <changelog author="mwilck@suse.com" date="1704974400">- Update to version 15.6.7:
  * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775)</changelog>
  <changelog author="mwilck@suse.com" date="1707134400">- Update to version 15.6.8:
  * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable
    (boo#1217979)
  * Don't rebuild existing initramfs images if the environment variable
    SKIP_REGENERATE_ALL=1 is set (boo#1192014)</changelog>
  <changelog author="mwilck@suse.com" date="1716379200">- Update to version 15.6.9:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)
  * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717)
  * README: Update blacklist description (gh#openSUSE/suse-module-tools#71)</changelog>
</package>
<package pkgid="80de7aec385e81cb6887c4a9f7bcfe4e96879d5e98c13e48cdf2d7ca8d1ad4c7" name="system-group-ne" arch="aarch64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="b005209191ea3b5a7833d5cb89546e6fad0e5d2d901295bddd2b404a9f46726b" name="system-group-ne" arch="x86_64">
  <version epoch="0" ver="1.3.0~git1.db34c02" rel="150600.10.3.1"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
</package>
<package pkgid="0ae1c74addae8960e993997bb171e22444f83b97d269c4d69be17983015bd207" name="typelib-1_0-GstAllocators-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c30da68ec25381b42b5ce6d784a4343c644d26f0d90683f20462d661de442e15" name="typelib-1_0-GstAllocators-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0f378bb1c77de3d45ce8d961cdddcfd71226cb6e65886e6199e8e7634f00ee21" name="typelib-1_0-GstAllocators-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="03ad581714f5f1214ada3431ef6910079d8df45f6a43a711fadb0193ef38423e" name="typelib-1_0-GstAllocators-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a5983026f7afa714f3b6a4fd5f22ddf3031be3fc1c084d074b02d4f52b994735" name="typelib-1_0-GstApp-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="21e36a415058aa2bd926c2f16a5f9115c17498a2cb89267f0cbccc5b166deab5" name="typelib-1_0-GstApp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="5a8b6f49d76d0fe56ca7f211987ac417e318cdb6892483b89afeb109e5fa13bc" name="typelib-1_0-GstApp-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="cebf8e20aa577399307afa57816270da99c125c8f474e6fc194aca99947094fa" name="typelib-1_0-GstApp-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="31708fff7931119a1c961ffe355db29fc7adcc3025ea0006ee187c4ea350be02" name="typelib-1_0-GstAudio-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="ddcd1deca52f01b9f701ad62cf05a5502ec291f85990f97d8442803fa9358736" name="typelib-1_0-GstAudio-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="ead4d9a824352bcfc8a923e95259ad0f78234f5f72e4e34c834ddbd55e053d0f" name="typelib-1_0-GstAudio-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="eb7bc599a3045b47f1e7500c494e48ead7c5aad4d611bad64a0b1405c5bacd8d" name="typelib-1_0-GstAudio-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a797d37449d12dd89fa98afc11de63d0f3a5b12ba0789e6d71fd80f160f78d90" name="typelib-1_0-GstGL-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a85145a9bfa7d739ca93aa97535d3dd5d71e2c4858e06abbbf1e251850520b85" name="typelib-1_0-GstGL-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bd6b580ad1a9533cd646a523efe8945537d793583350fb11713f8f2cfe442a9c" name="typelib-1_0-GstGL-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="9f71d8e847953ca9b9331f49923cf1cf696c370b0e1fd82566e0fa0201d4cb13" name="typelib-1_0-GstGL-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2f186db1ea3de771216a35052f7ed815610bb616362bf2371446a2ce5be6147f" name="typelib-1_0-GstGLEGL-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="dde89fe6664769d6a96c3f86ba392ea1d470169ec4ad89e120b3ea68fefccbbe" name="typelib-1_0-GstGLEGL-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c70792ace15f468d8e7007a8d13ee90cae39acca47584277f445f3c9c6319adf" name="typelib-1_0-GstGLEGL-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1dc8bb1fd7852760fad1ba468e153762e038ef9c1d95d9b6c211cc7d2265c42e" name="typelib-1_0-GstGLEGL-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="7a5c1c635115e7879449097bacfe40b369bb3bf5fdf5f6c326b6fefbc11a6299" name="typelib-1_0-GstGLWayland-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1a213f6b5d25e49bfe82bc0531162779606f4a1ec29dd9da5199184ceac3b141" name="typelib-1_0-GstGLWayland-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="fdf1fcaf392e2aaf892430ea7ca91736539b48490ece26d2166f601c55fdf715" name="typelib-1_0-GstGLWayland-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="dd9424e7edc2b0443db44b6856037e57e10c6aef947e9bec66a7276f116c86f6" name="typelib-1_0-GstGLWayland-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="04cdbadc5300579449d8c16fd812f50064debd4ac3156c98b276242fa8e61c2d" name="typelib-1_0-GstGLX11-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="4cbcff15e62f76851d6005544e48d707c6267215c1352bacff37315546f3e278" name="typelib-1_0-GstGLX11-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0f81b9b98921421c833d447aa22efcfb76a2b201fbe70a6b7f15178504b81a81" name="typelib-1_0-GstGLX11-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="6c796c190ae92e08bb3df36f9128a15f6f99c684a95fb7c15b0d65f45c4c88b8" name="typelib-1_0-GstGLX11-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="32f8c396760b5c0f678ed432634be6062d9d861ac7645427b407e713ba9fdbba" name="typelib-1_0-GstPbutils-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="31ced091c8477dc6854a516692ea71d00cdf72b7b6bb36d1b1d4098b28aaa3a8" name="typelib-1_0-GstPbutils-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="3e378f94b5bfac1cffc5f6f6d21b225e78dbcaa2ae3a91941aa637c9c41a9ddf" name="typelib-1_0-GstPbutils-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="b8e169d61b88fc6ff32be027b7ed35aa4a1406cb330c0bb2fe2ce967b3879bd2" name="typelib-1_0-GstPbutils-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e2a81725beea12c3360fe75ab50ffe2fc3c2169079b9bb0d42cbd95cec19eaba" name="typelib-1_0-GstRtp-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e4d22dddb1316e5147bebf57e7fcbc124f8e720394cec23292385af752c54c3d" name="typelib-1_0-GstRtp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="faa9c5ca52afee4d328b70caae887363483bc48ab78416356bd526aa078e1cca" name="typelib-1_0-GstRtp-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="758883de201fc6acf72e15b20acbbbdc71150697433a852d1ab02322c1e9116e" name="typelib-1_0-GstRtp-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c454052c921644c07a56c83b471ebe38d574191382e5d3c5d933c1a26adbc307" name="typelib-1_0-GstRtsp-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="abba5102f16090e93394bb19efcd508474a1175f00260d137f4604cedb75a844" name="typelib-1_0-GstRtsp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1fcaf284650ad2b69897ffeaaf98c08acfa3e0897f858ef71e6322b7b3bfcf54" name="typelib-1_0-GstRtsp-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="869836d39cc0885153cbf63738fce04352b19d5bbdb9f554fa2b1c76ab7e724f" name="typelib-1_0-GstRtsp-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="fb173bc1c649c0e53739494cda413054ff0ef34437134d58a00104f05b6a20f9" name="typelib-1_0-GstSdp-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="58127f6420eabd43266787ae159fcb2c9945a77500925f49d1f90dfae460c45e" name="typelib-1_0-GstSdp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="a306338422ae37ddaba8fefd16d4344e8a9d2415d1f3ee81c3c7d803dfe1a3fe" name="typelib-1_0-GstSdp-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c7ed4e813a888418c600ca76dd8b1c539483ef497a625b93858af1c860a21953" name="typelib-1_0-GstSdp-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0c870aaa06a83c452d4fbda484553775a7e6004972e2088099fe51fa22f7dd31" name="typelib-1_0-GstTag-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="225c19a4b1c6f8c7891cc087d8568616c6d6df9a79658bf67e2909a877f1e72c" name="typelib-1_0-GstTag-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="fae0b94eacd6530be699e3408a2e2bc3ff529f2be59931672c7280393368ab96" name="typelib-1_0-GstTag-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e4c7f6471a09bc9cd78d1afb09a0e1373ee99093076a0c45aa1059a327e121a3" name="typelib-1_0-GstTag-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="12e15ce9598c5adb6e2e91fd185304929e883a0b4adece6b736609968ddc4a70" name="typelib-1_0-GstVideo-1_0" arch="aarch64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="d0e9b2b6f8bd8c2cef05b4e5296901eecf0d8dd378221b1b3cb66d5b66c8d9e3" name="typelib-1_0-GstVideo-1_0" arch="ppc64le">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="b243cdbd4f263d728bb6276f64dd6166181749ebcad7ab025e181ebe057d99ba" name="typelib-1_0-GstVideo-1_0" arch="s390x">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e3cf1b4fcdf5fa45584eb8657c463dbdb0bfb870c6ad6d6311906fb250c99116" name="typelib-1_0-GstVideo-1_0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="8cb904b27f692cdd0220042f1959bfc870372792af57dc8bd0a9ae550c9fbefe" name="typelib-1_0-Gtk-4_0" arch="aarch64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="94ed727ccb34d763b5775b51fcfa7a1eabb65e1c5f777e06d5a5a48f20175d56" name="typelib-1_0-Gtk-4_0" arch="ppc64le">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="e48dbc6bc7f976846894a140d6b0ba51c9cd264606679f03baab4b7c23823e7c" name="typelib-1_0-Gtk-4_0" arch="s390x">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="34cf291e872e9e8bfaa2c11ff2624beebdf80fc38c9383452ebcd18eaa63991a" name="typelib-1_0-Gtk-4_0" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Disable vulkan support, stop passing vulkan=enabled to meson.
  Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
  enable ffmpeg support by default and we do not enable it, so no
  need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
  build-examples=false to meson, no longer build these as we are
  not running or installing them anyway, save a lot on buildtime.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681300800">- Place English translations in the tools sub-package instead of
  lang. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
  the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 4.10.2:
  + Holding control to select multiple files broken in filechooser
  + Inspector crash
  + Listbase doesn't account for bottom padding in
    size_allocate_child
  + Leaking AT contexts
  + OpenGL / Windows: Crash when closing gtk4-widget-factory
  + GTK apps crash on startup when setting cursor-size to 0 on
    Wayland
  + Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
    to null-check display-&gt;xdg_activation before using it
  + Possible use-after-free under
    gtk_scrolled_window_update_use_indicators()
  + Wrong error message in `gtk_init`
  + Segfault when scrolling after changing ListView model
  + Bluetooth panel from the Settings app: clicking in the
    "Downloads" link no longer opens Nautilus
  + Broadway docs or code is broken
  + Disabled GtkPicture's are not properly themed
  + Setting CSS padding to a GtkTextView gives the context menu an
    offset
  + A11y: the Showing state is used only for windows
  + Gtk4 expander: CSS nodes mismatch code vs. documentation
  + Invoking gtk inspector on a folder results in a crash
  + Double tap requires very precise touch input
  + Name autocompletion dropdown in the GTK4 FileChooser's Save
    dialog gets stuck, creates artifacts, jumps around
  + Links are not opened when xdg-desktop-portal OpenURI is not
    available
  + GtkSnapshot generates no nodes appending whitespace-only
    layouts
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682164800">- Update to version 4.10.3:
  + Fix a popover positioning regression in 4.10.2.
  + Fix issues with slow loading files in the file chooser.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Do not build media playback when bootstrapping on Workbench.</changelog>
  <changelog author="badshah400@gmail.com" date="1683115200">- Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where
  deleting files causes folders in the directory to disappear and
  reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken
  from upstream commit.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683201600">- Add 966a2350.patch: css: Don't transition to currentColor.
  Transition to the color that is in use instead. Fixes crashes
  because currentColor is not an RGBA color and therefor could not
  be queried later (glgo#GNOME/gtk#5798).</changelog>
  <changelog author="info@paolostivanin.com" date="1685880000">- Add fix-gridview.patch: Add border-spacing where it was missed.
  We were computing column widths without taking border-spacing into
  account, making them slightly too big (glgo#GNOME/nautilus#2980).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685966400">- Update to version 4.10.4:
  + GtkFileChooser: Fix some memory leaks
  + GtkUriLauncher: Validate the uri
  + GtkStack: Fix a crash
  + GtkGridView: Respect css border-spacing
  + GtkScrolledWindow: Propagate child measure size whenever
    possible
  + GtkPopoverMenu: Avoid unnecessary left padding
  + GtkSearchEntry: Improve size allocation for the clear icon
  + X11:
  - Avoid black flickering with xwayland window decorations
  - Trap XRandr errors
  + CSS: Various fixes to transitions
  + Updated translations.
- Drop patches fixed upstream:
  + fix-gridview.patch
  + gtk4-correctly-refresh-after-delete.patch
  + 966a2350.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691236800">- Update to version 4.10.5:
  + Fix ordering problems with filter model signals
  + Avoid lingering resize cursors
  + Fix alignment issues on sparc
  + Fix a problem with CSS corner values
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691323200">- Update to version 4.11.4:
  + GtkFileChooser:
  - Default to sorting folders first
  - Fix a crash when visiting recent files
  + GtkTextView: Fix corner cases in word navigation
  + GtkMenuButton: Normalize label layout
  + GtkDropDown: Add support for sections
  + GtkVideo: Make the overlay icon clickable
  + GtkWindow: Clear the resize cursors to avoid artifacts
  + GtkFileDialog: Always set initial-folder
  + GtkDropDown: Update on expression changes
  + GtkMapListModel: Implement GtkSectionModel
  + Accessibility:
  - Improvements all over the place: GtkButton, GtkPasswordEntry,
    GtkFontChooserDialog, GtkColorChooserDialog,
    GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog,
    GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher,
    GtkMediaControls, GtkColorDialogButton, GtkDropDown,
    GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton
  - Make name computation follow the ARIA spec more closely
  - Adapt name computation for the common 'nested button'
    scenario
  - Change many containers to use `generic` instead of `group`
  - Use `generic` as the default role
  - Use `application` instead of `window` for windows
  - Add properties for accessible names of not directly exposed
    widgets in GtkListView, GtkGridView and GtkColumnView
  + DND: Fix criticals when drops are rejected
  + X11: Fix regressions in GLX setup
  + Windows: Center newly created transient windows
  + Vulkan:
  - Add antialising for gradients
  - Do less work on clipped away nodes
  - Redo image uploading
  - Support different image depths and formats
  - Add a pipeline cache
  + Demos:
  - gtk4-demo: Improve window sizing
  - gtk4-demo: Improve focus behavior
  - gtk4-demo: Add many missing a11y properties
  + Tools: gtk4-builder-tool: Make render an alias screenshot
  + Inspector:
  - Show more information in the a11y tab
  - Add an accessibility overlay with warnings and
    recommendations
  - Limit the width of the a11y tab
  + Build:
  - Require GLib 2.76
  - Make asan builds work again
  - Fix the build if ld is not ld.bdf
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691409600">- Update to version 4.12.0:
  + List widgets: Add scroll_to APIs
  + GtkFileLauncher: Add an always-ask property
  + GtkTextView: Make backspace behavior match GtkEntry
  + gsk: Fix handling of luminance in mask nodes
  + Text rendering: Automate the setting of gtk-hint-font-metrics
    from the scale factor. This improves font rendering in flatpaks
  + Wayland:
  - Fix behavior of stylus buttons
  - Support suspended window state
  + Vulkan: Many improvements
  + Tools: Add gtk4-rendernode-tool
  + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag
  + Build: Some build options have been renamed:
  - gtk_doc -&gt; documentation
  - update_screenshots -&gt; screenshots
  - The old names still work
  + Updated translations.
- Update option passed to meson following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692619200">- Add 6af9dc86.patch: print: Revert "Start sorting apart includes"
  change for gtkprinteroptionprivate.h.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692964800">- Update to version 4.12.1:
  + GtkGridView: Fix a crash when scrolling
  + GtkColumnView: Fix a refcounting issue in the new scroll_to api
  + GtkTreeView: Fix style classes for sort arrows
  + GtkEntry: Improve tracking of user changes (for undo)
  + GtkNotebook: Fix a critical when switching pages
  + GtkColor/FontDialogButton: Make these widgets activatable
  + GtkMenuButton:
  - Fix problems with focus handling
  - Fix problems with DND
  + Printing: Fix the cpdb backend build
  + GSK: Fix issues with color matrix nodes
  + Wayland: Fix a crash with compositors other than gnome-shell
  + Updated translations.
- Drop patches fixed upstream:
  + 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  + 6af9dc86.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1693483200">- Re-add 0001-Revert-Meson-Simplify-pkgconfig-file-generator.patch
  and rebased/simplified (less correct, but sufficient for us)  for
  4.12.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695211200">- Add e001b421.patch: tooltip: don't cross native boundaries.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1695211201">- Update to version 4.12.2:
  + GtkTooltip: Don't cross native boundaries when looking for
    tooltips.
  + GtkCenterLayout, GtkEntry, GtkSearchEntry: Fix some issues with
    baseline handling.
  + GtkSwitch: Respect text direction.
  + Theme: Use relative font sizes.
  + GSK:
  - Make repeated gradients match between GL and cairo.
  - Make rounded rect shrinking match between Vulkan, GL and
    cairo.
  - Fix parsing of text nodes with color glyphs.
  - Restrict an optimization to the cases where it is correct.
  - Fix rendering of shadows with opacity.
  + Updated translations.
- Drop merged upstream patch: e001b421.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695902400">- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701432000">- Update to version 4.12.4:
  + a11y: Tweak name computation for some corner cases.
  + gdk:
  - gl: Improve our use of GLES a bit (use vertex arrays and
    GL_BGRA if available)
  - Fix some errors in our memory format tables
  + gsk:
  - gl: handle texture-scale nodes more faithfully
  - gl: Fix icon padding in the atlas
  + Tools: Add a --undecorated option to gtk4-rendernode-tool.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1717156800">- Add 0001-changes-to-fix-the-memorytexture-regression.patch for
  bsc#1221052 - Fix icon rendering on big-endian s390x.  This
  corresponds to
  https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7111</changelog>
</package>
<package pkgid="57df50f569ce9b3ab673af48bc58edba4060cc0207ca551d512c126dc380c87e" name="typelib-1_0-JavaScriptCore-4_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f5d95c7dca7eb54b6b583f0f3c2306eb32e75da184efa7fd2db193a85e6965f7" name="typelib-1_0-JavaScriptCore-4_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6c3c8bd3b70aa35226b618ec59a536e939a0a0f2ee350459d121b281b5db6e59" name="typelib-1_0-JavaScriptCore-4_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="1adf31faea4a296c59f3ed8f50e1e66dfb7f11bc845fc0806b64a241b4136b91" name="typelib-1_0-JavaScriptCore-4_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6ecca445f6c73496b7233dba6e92fd0ad7bfa1416fd6a3821ba2b3c26a765ef8" name="typelib-1_0-JavaScriptCore-4_1" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6bc1869f93df18938cce8a0b05a3f734201f2bd74bb157f2b2f8e10d19839b52" name="typelib-1_0-JavaScriptCore-4_1" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9138679aadbd357127baeb8b20513ef88e2a2b418f940ba276aaecab57feb51f" name="typelib-1_0-JavaScriptCore-4_1" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="0a0b2b285d9959a1e462c3ebd070eb73cfe1ef3ac10ca99748074b0cf4959b1d" name="typelib-1_0-JavaScriptCore-4_1" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="030e41485a473176336e4cfb248f35369669de125f1e48df33569a1d64d53b9d" name="typelib-1_0-JavaScriptCore-6_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f121cf66962d96d80ea1076ab87f321c910b82f8af7251d63b4649624e012f7a" name="typelib-1_0-JavaScriptCore-6_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="db7ae95c8c36c62a5ef934997ba3f4943e9f9c67bd8303e4072bf002783b04c6" name="typelib-1_0-JavaScriptCore-6_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="aa7d57694bc63d73e09525a90d8a250f6bcdd63b80163e543d77d94ed76638df" name="typelib-1_0-JavaScriptCore-6_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="22a7e99b65a6f623b81399c3472bc1e7c9a889ed55cd039156e3771982fba799" name="typelib-1_0-WebKit-6_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="59a71379cd73082df18190a5570e1f2e970076109949d6b7aebd353b467df055" name="typelib-1_0-WebKit-6_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="356f559c553aa0f1c3b7f4ba7d57cf8606714a6f133211a7ef92cdb07e2a2f36" name="typelib-1_0-WebKit-6_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="4a77e76eac23493763eb614427f8692aace39d75b8eafd0335793939ba6930ba" name="typelib-1_0-WebKit-6_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="e03fab81819555c2f05107a120f2178b4429173d0ebac81486b2b2867e13a21f" name="typelib-1_0-WebKit2-4_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="95600e8a1ed9f6893f13ba4d3f45cac51dc5d4f21359a504df3d4183828cf12c" name="typelib-1_0-WebKit2-4_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="3371afec02df5e8f01363aec243b6731dbedc9fd33357728941e979302fd6a9b" name="typelib-1_0-WebKit2-4_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="1034847cc68eae28d92864a10f49114f5951d499b69d0631d4c46ced013b5fee" name="typelib-1_0-WebKit2-4_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6090655f9a49fec9c6877d390f050a1d28cce4cd206ed99e46b3f4e1049fa17c" name="typelib-1_0-WebKit2-4_1" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="8125e4ff83a1756e2c6e755eec0a59fd794bf242533186d700aed1fc99a17f5f" name="typelib-1_0-WebKit2-4_1" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="93440c1fcf884b53c9889fbcbaaf00804a27b1b814955501595cb4418ac5e9d2" name="typelib-1_0-WebKit2-4_1" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="b6c4f9e42476e4300bdc232f535b4ba0d6e498326637cc3dce9302870c449a38" name="typelib-1_0-WebKit2-4_1" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f1c236659d54327b3abfbe1da5b3b6eb53de4700b1f08c33fed4143e5d979842" name="typelib-1_0-WebKit2WebExtension-4_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="66fd26f58bc26f688683e32f259c15767d29142e010029b890829d381066b076" name="typelib-1_0-WebKit2WebExtension-4_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6b9a005f0b456262d0f4de6d5bbd55a352d6c44afa0aac6bcef134967546ba06" name="typelib-1_0-WebKit2WebExtension-4_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6a53415cf79a5962d5ca943d58829184881541f5385d2796d6d076d8d944da1a" name="typelib-1_0-WebKit2WebExtension-4_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="bd21b8db809c960ce95de5d36c58bfea85d73b695cccca4ebce0d9d93fbf0536" name="typelib-1_0-WebKit2WebExtension-4_1" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="e0ec1997e1648f07585a0d725ec36a820e6a3441da531e71e233fb2cea7c1862" name="typelib-1_0-WebKit2WebExtension-4_1" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="92c3f7212c1b07a6379cee39338440326c8e7cce7896226bd808e3d83961d774" name="typelib-1_0-WebKit2WebExtension-4_1" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9e587bb168c7ffb80b9ff29f5b04a1b56cb5607ad5b0c136cdeeee1a68f919ff" name="typelib-1_0-WebKit2WebExtension-4_1" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="18c220fd6979f8b7faf6885443ccf74a3b198d4bc5aee271694b0b0b8470f7fe" name="typelib-1_0-WebKitWebProcessExtension-6_0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="036af9c03db1b7fd8eb6aad43eb9c64933223fc654ece50f99b7a58a936fb89b" name="typelib-1_0-WebKitWebProcessExtension-6_0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9e589325b2640768a30d5483029f024241a115394e3870aa422145a717216753" name="typelib-1_0-WebKitWebProcessExtension-6_0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="6bbd236d722a7aa491262b8a9236be095cb2521b98c54e9005cc8cefe9817e1f" name="typelib-1_0-WebKitWebProcessExtension-6_0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="1b270817d07d128a8ca5414a5bbdf13e65afd4517d0eefb7fc64a06826cf5860" name="ucode-intel" arch="src">
  <version epoch="0" ver="20240514" rel="150200.41.1"/>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
  <changelog author="meissner@suse.com" date="1700049600">- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000042c | 00000430 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 0000042c | 00000430 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000011 | 00000012 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | ICL-D          | B0       | 06-6c-01/10 | 01000230 | 01000268 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003a5 | 0d0003b9 | Xeon Scalable Gen3
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000bc | 000000c2 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004119 | 0000411c | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 00000119 | 0000011d | Core Gen13
  | RKL-S          | B0       | 06-a7-01/02 | 00000059 | 0000005d | Core Gen11
  | RPL-S          | H0       | 06-bf-05/07 | 0000002e | 00000032 | Core Gen12
  | RPL-S/HX       | C0       | 06-bf-02/07 | 0000002e | 00000032 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004119 | 0000411c | Core Gen13
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000271 | 2c000290 | Xeon Max
  | TGL            | B0/B1    | 06-8c-01/80 | 000000ac | 000000b4 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000046 | 0000004e | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002c | 00000034 | Core Gen11 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1710331200">- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
  - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html
  - CVE-2023-39368: Protection mechanism failure of bus lock regulator
    for some Intel Processors may allow an unauthenticated user to
    potentially enable denial of service via network access
  - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
  - CVE-2023-38575: Non-transparent sharing of return predictor targets
    between contexts in some Intel Processors may allow an authorized
    user to potentially enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
  - CVE-2023-28746: Information exposure through microarchitectural
    state after transient execution from some register files for some
    Intel Atom Processors may allow an authenticated user to potentially
    enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html
  - CVE-2023-22655 Protection mechanism failure in some 3rd and 4th
    Generation Intel Xeon Processors when using Intel SGX or Intel TDX
    may allow a privileged user to potentially enable escalation of
    privilege via local access.
  - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html
  - CVE-2023-43490: Incorrect calculation in microcode keying mechanism
    for some Intel Xeon D Processors with Intel® SGX may allow a
    privileged user to potentially enable information disclosure via
    local access.
  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
  - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.
  - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.
  - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.
  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
  - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.
  - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.
  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.
  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
  - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.
  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update  https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.
  - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.
  - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.
  - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.
  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.
  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | EMR-SP         | A-1      | 06-cf-02/87 |          | 21000200 | Xeon Scalable Gen5
  | EMR-SP         | A-0      | 06-cf-01/87 |          | 21000200 | Xeon Scalable Gen5
  | MTL            | C-0      | 06-aa-04/e6 |          | 0000001c | Core Ultra Processor
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000032 | 00000034 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000032 | 00000034 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000430 | 00000432 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000430 | 00000432 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000012 | 00000015 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | BDX-NS         | A1       | 06-56-05/10 | 0e000014 | 0e000015 | Xeon D-1513N/23/33/43/53
  | CFL-H          | R0       | 06-9e-0d/22 | 000000fa | 000000fc | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f4 | 000000f6 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f4 | 000000f6 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f4 | 000000f6 | Core Gen9 Desktop
  | CLX-SP         | B0       | 06-55-06/bf | 04003604 | 04003605 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003604 | 05003605 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f8 | 000000fa | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f8 | 000000fa | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002703 | 07002802 | Xeon Scalable Gen3
  | DNV            | B0       | 06-5f-01/01 | 00000038 | 0000003e | Atom C Series
  | EHL            | B1       | 06-96-01/01 | 00000017 | 00000019 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | GLK            | B0       | 06-7a-01/01 | 0000003e | 00000040 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000022 | 00000024 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000268 | 01000290 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c2 | 000000c4 | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003b9 | 0d0003d1 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000024 | 24000026 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f4 | 000000f8 | Core Gen7; Xeon E3 v6
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 0000411c | 00004121 | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 0000011d | 00000122 | Core Gen13
  | RPL-S          | H0       | 06-bf-05/07 | 00000032 | 00000034 | Core Gen12
  | RKL-S          | B0       | 06-a7-01/02 | 0000005d | 0000005e | Core Gen11
  | RPL-S/HX       | C0       | 06-bf-02/07 | 00000032 | 00000034 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 0000411c | 00004121 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 01000181 | 01000191 | Xeon Scalable
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b4 | 000000b6 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000004e | 00000050 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000034 | 00000036 | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen8 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1715774400">- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
  - CVE-2023-45733: Security updates for  INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
  - CVE-2023-46103: Security updates for  INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html
  - CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html
  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 14th &amp; 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Cor™ Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
  - Updated Platforms:
    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
    |:---------------|:---------|:------------|:---------|:---------|:---------
    | ADL            | C0       | 06-97-02/07 | 00000034 | 00000035 | Core Gen12
    | ADL            | H0       | 06-97-05/07 | 00000034 | 00000035 | Core Gen12
    | ADL            | L0       | 06-9a-03/80 | 00000432 | 00000433 | Core Gen12
    | ADL            | R0       | 06-9a-04/80 | 00000432 | 00000433 | Core Gen12
    | ADL-N          | N0       | 06-be-00/11 | 00000015 | 00000017 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
    | AZB            | A0       | 06-9a-04/40 | 00000005 | 00000007 | Intel(R) Atom(R) C1100
    | AZB            | R0       | 06-9a-04/40 | 00000005 | 00000007 | Intel(R) Atom(R) C1100
    | EMR-SP         | A0      | 06-cf-01/87 | 21000200 | 21000230 | Xeon Scalable Gen5
    | EMR-SP         | A1      | 06-cf-02/87 | 21000200 | 21000230 | Xeon Scalable Gen5
    | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000122 | 00000123 | Core Gen13/Gen14
    | RPL-HX/S       | C0       | 06-bf-02/07 | 00000034 | 00000035 | Core Gen13/Gen14
    | RPL-S          | H0       | 06-bf-05/07 | 00000034 | 00000035 | Core Gen13/Gen14
    | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000290 | 2c000390 | Xeon Max
    | SPR-SP         | E2       | 06-8f-05/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E3       | 06-8f-06/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4</changelog>
</package>
<package pkgid="91359685745bafaf981a9f9456725bb6a71dcd70df1a1b52ecfedb4dca808e89" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20240514" rel="150200.41.1"/>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
  <changelog author="abergmann@suse.com" date="1691582400">- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
  Security issues fixed:
  - CVE-2022-40982: Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
  - CVE-2023-23908: Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
  - CVE-2022-41804: Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
  Functional issues fixed:
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel® Core™ Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | SKX-D          | H0       | 06-55-04/b7 | 02006f05 | 02007006 | Xeon D-21xx
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02007006 | Xeon Scalable
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f2 | 000000f4 | Core Gen7; Xeon E3 v6
  | ADL            | L0       | 06-9a-03/80 | 0000042a | 0000042c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000042a | 0000042c | Core Gen12
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000390 | 0d0003a5 | Xeon Scalable Gen3
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f6 | 000000f8 | Core Gen10
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f8 | 000000fa | Core Gen9 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000058 | 00000059 | Core Gen11
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000ba | 000000bc | Core Gen10 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000044 | 00000046 | Core Gen11 Mobile
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000461 | 2b0004b1 | Xeon Scalable Gen4
  | CML-S62        | G1       | 06-a5-03/22 | 000000f6 | 000000f8 | Core Gen10
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f0 | 000000f4 | Core Gen8 Mobile
  | RPL-S          | B0       | 06-b7-01/32 | 00000113 | 00000119 | Core Gen13
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | ADL-N          | A0       | 06-be-00/11 |          | 00000011 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | CPX-SP         | A1       | 06-55-0b/bf | 07002601 | 07002703 | Xeon Scalable Gen3
  | CLX-SP         | B0       | 06-55-06/bf | 04003501 | 04003604 | Xeon Scalable Gen2
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f2 | 000000f4 | Core Gen8 Desktop, Mobile, Xeon E
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0001d1 | 2c000271 | Xeon Max
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f2 | 000000f4 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003501 | 05003604 | Xeon Scalable Gen2
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f2 | 000000f4 | Core Gen8
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002a | 0000002c | Core Gen11 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f2 | 000000f4 | Core Gen7 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f6 | 000000f8 | Core Gen8 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000171 | 01000181 | Xeon Scalable
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f2 | 000000f4 | Core Gen9 Desktop
  | TGL            | B0/B1    | 06-8c-01/80 | 000000aa | 000000ac | Core Gen11 Mobile
  | ADL            | C0       | 06-97-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 0000002c | 0000002e | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 0000002c | 0000002e | Core Gen12
  | CML-H          | R1       | 06-a5-02/20 | 000000f6 | 000000f8 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 |          | 00004119 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 |          | 00004119 | Core Gen13</changelog>
  <changelog author="meissner@suse.com" date="1697803200">- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113).
  (bsc#1215278)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)</changelog>
  <changelog author="meissner@suse.com" date="1700049600">- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
  - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)
  - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)
  - Update for functional issues. Refer to [13th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel® Core™ Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [4th Gen Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to [3rd Generation Intel® Xeon® Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [Intel® Processors and Intel® Core™ i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel® Xeon® D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 0000002e | 00000032 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000042c | 00000430 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 0000042c | 00000430 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000011 | 00000012 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 | 00000004 | 00000005 | Intel(R) Atom(R) C1100
  | ICL-D          | B0       | 06-6c-01/10 | 01000230 | 01000268 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003a5 | 0d0003b9 | Xeon Scalable Gen3
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000bc | 000000c2 | Core Gen10 Mobile
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004119 | 0000411c | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 00000119 | 0000011d | Core Gen13
  | RKL-S          | B0       | 06-a7-01/02 | 00000059 | 0000005d | Core Gen11
  | RPL-S          | H0       | 06-bf-05/07 | 0000002e | 00000032 | Core Gen12
  | RPL-S/HX       | C0       | 06-bf-02/07 | 0000002e | 00000032 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004119 | 0000411c | Core Gen13
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-SP         | E0       | 06-8f-04/87 | 2b0004b1 | 2b0004d0 | Xeon Scalable Gen4
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000271 | 2c000290 | Xeon Max
  | TGL            | B0/B1    | 06-8c-01/80 | 000000ac | 000000b4 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000046 | 0000004e | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 0000002c | 00000034 | Core Gen11 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1710331200">- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
  - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html
  - CVE-2023-39368: Protection mechanism failure of bus lock regulator
    for some Intel Processors may allow an unauthenticated user to
    potentially enable denial of service via network access
  - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
  - CVE-2023-38575: Non-transparent sharing of return predictor targets
    between contexts in some Intel Processors may allow an authorized
    user to potentially enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
  - CVE-2023-28746: Information exposure through microarchitectural
    state after transient execution from some register files for some
    Intel Atom Processors may allow an authenticated user to potentially
    enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html
  - CVE-2023-22655 Protection mechanism failure in some 3rd and 4th
    Generation Intel Xeon Processors when using Intel SGX or Intel TDX
    may allow a privileged user to potentially enable escalation of
    privilege via local access.
  - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html
  - CVE-2023-43490: Incorrect calculation in microcode keying mechanism
    for some Intel Xeon D Processors with Intel® SGX may allow a
    privileged user to potentially enable information disclosure via
    local access.
  - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
  - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
  - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.
  - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.
  - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.
  - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
  - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.
  - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.
  - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.
  - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
  - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.
  - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update  https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.
  - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.
  - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.
  - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.
  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.
  - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | EMR-SP         | A-1      | 06-cf-02/87 |          | 21000200 | Xeon Scalable Gen5
  | EMR-SP         | A-0      | 06-cf-01/87 |          | 21000200 | Xeon Scalable Gen5
  | MTL            | C-0      | 06-aa-04/e6 |          | 0000001c | Core Ultra Processor
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000032 | 00000034 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000032 | 00000034 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000430 | 00000432 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000430 | 00000432 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000012 | 00000015 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | BDX-NS         | A1       | 06-56-05/10 | 0e000014 | 0e000015 | Xeon D-1513N/23/33/43/53
  | CFL-H          | R0       | 06-9e-0d/22 | 000000fa | 000000fc | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f4 | 000000f6 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f4 | 000000f6 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f4 | 000000f6 | Core Gen9 Desktop
  | CLX-SP         | B0       | 06-55-06/bf | 04003604 | 04003605 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003604 | 05003605 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f8 | 000000fa | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f8 | 000000fa | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002703 | 07002802 | Xeon Scalable Gen3
  | DNV            | B0       | 06-5f-01/01 | 00000038 | 0000003e | Atom C Series
  | EHL            | B1       | 06-96-01/01 | 00000017 | 00000019 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | GLK            | B0       | 06-7a-01/01 | 0000003e | 00000040 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000022 | 00000024 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000268 | 01000290 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c2 | 000000c4 | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003b9 | 0d0003d1 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000024 | 24000026 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/X/E3 | B0       | 06-9e-09/2a | 000000f4 | 000000f8 | Core Gen7; Xeon E3 v6
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 0000411c | 00004121 | Core Gen13
  | RPL-S          | B0       | 06-b7-01/32 | 0000011d | 00000122 | Core Gen13
  | RPL-S          | H0       | 06-bf-05/07 | 00000032 | 00000034 | Core Gen12
  | RKL-S          | B0       | 06-a7-01/02 | 0000005d | 0000005e | Core Gen11
  | RPL-S/HX       | C0       | 06-bf-02/07 | 00000032 | 00000034 | Core Gen12
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 0000411c | 00004121 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 01000181 | 01000191 | Xeon Scalable
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b0004d0 | 2b000590 | Xeon Scalable Gen4
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b4 | 000000b6 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000004e | 00000050 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000034 | 00000036 | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f8 | 000000fa | Core Gen8 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1715774400">- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
  - CVE-2023-45733: Security updates for  INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
  - CVE-2023-46103: Security updates for  INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html
  - CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html
  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 14th &amp; 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Cor™ Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
  - Updated Platforms:
    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
    |:---------------|:---------|:------------|:---------|:---------|:---------
    | ADL            | C0       | 06-97-02/07 | 00000034 | 00000035 | Core Gen12
    | ADL            | H0       | 06-97-05/07 | 00000034 | 00000035 | Core Gen12
    | ADL            | L0       | 06-9a-03/80 | 00000432 | 00000433 | Core Gen12
    | ADL            | R0       | 06-9a-04/80 | 00000432 | 00000433 | Core Gen12
    | ADL-N          | N0       | 06-be-00/11 | 00000015 | 00000017 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
    | AZB            | A0       | 06-9a-04/40 | 00000005 | 00000007 | Intel(R) Atom(R) C1100
    | AZB            | R0       | 06-9a-04/40 | 00000005 | 00000007 | Intel(R) Atom(R) C1100
    | EMR-SP         | A0      | 06-cf-01/87 | 21000200 | 21000230 | Xeon Scalable Gen5
    | EMR-SP         | A1      | 06-cf-02/87 | 21000200 | 21000230 | Xeon Scalable Gen5
    | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000122 | 00000123 | Core Gen13/Gen14
    | RPL-HX/S       | C0       | 06-bf-02/07 | 00000034 | 00000035 | Core Gen13/Gen14
    | RPL-S          | H0       | 06-bf-05/07 | 00000034 | 00000035 | Core Gen13/Gen14
    | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000290 | 2c000390 | Xeon Max
    | SPR-SP         | E2       | 06-8f-05/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E3       | 06-8f-06/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4
    | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000590 | 2b0005c0 | Xeon Scalable Gen4</changelog>
</package>
<package pkgid="fb1a263adaf330c183ace2e8476c0c09e9922219ef80695b603b04b3ac5ceb0a" name="unbound" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="30fbfd99a6a6ceceff5b3abc02f374181ea5b04ff0b782c7d9d61073c1224c6f" name="unbound" arch="ppc64le">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="b1442739860170c4318a47f2eee1ada04a681fe63b5ed80b5d6c05fe4c111f0b" name="unbound" arch="s390x">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="d41308b036eb6c6601dc7cb5d3418a13a2a3477b32907f116e74e2d0e21baf28" name="unbound" arch="src">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="64e65d422316af9ceeb576aea5f239c964238751f8b753a6ba03ee0b5ee6aab0" name="unbound" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="d3de83f26c638f8b963c87dbd4eace792d773964565afc2a1315ae37662f6fe2" name="unbound-anchor" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="54176c985b4503f9c53e6c994e059ed3378cd1748d76e2907454a58ff637a2ec" name="unbound-anchor" arch="ppc64le">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="b9028694c22b28e34203e4ac2baa8db1a3d0f2088fb41ccd3dcc6f819dd6a030" name="unbound-anchor" arch="s390x">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="d16f0e1b6f0b690923048276ba52622a2c63424bfffc2268d3e175eda6affef9" name="unbound-anchor" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="6443d11dd54dd6d7179f2f6012af6f66053c131cbf4560fde70c8e4285706c0c" name="unbound-devel" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="48ea5e76a02da25a95dffeea6ed515377b26c0ff1f29e2c0d18bd50ec6b47410" name="unbound-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="e726088ca7018aaca84b7e05420adb36392fb88151fe323aa370a364af21a2dc" name="unbound-devel" arch="s390x">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="c16b7c26b5704dce67cb419f10725a3c8f2b7f42a6497e229f27183acd2952a5" name="unbound-devel" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="9b3f8064b8ee8c7d1c069825dc3878534c7a167595ce2ff71374acd498e6d819" name="unbound-munin" arch="noarch">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="a31e908c858f89f67f5375cea61bfbedd27d14ba8642db8f5b263cd7a27f7983" name="unbound-python" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="ff5984aa92662149c2a01d9a676ac97ecbcec11c6d8d59e7510e43b60d038834" name="unbound-python" arch="ppc64le">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="e2a7eef8fa7bb7e3e420a5c80e82a194596ea4fe4b825a99d2e0d4a3f0f9f1c2" name="unbound-python" arch="s390x">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="e8cdc0c063ecc80048bb0dd46bbf71daa94bc62ac2d64ef697f6412342b90007" name="unbound-python" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.3.1"/>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
</package>
<package pkgid="b1e1408a680714ec43273b6e6f109c78757e59c035998fb79c4a4d594480ea54" name="update-test-32bit-pkg-32bit" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="19684706a6223b7f787dc9ec13d9918f336d4b03a125752025b116959deec968" name="update-test-32bit-pkg" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="906a3d47df2af48af2a22f690d5de827ecfd5ecce2bfeff59c1ba2f95db88cef" name="update-test-32bit-pkg" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="796e750f1bbc9bbce2091f71f85988e82651df3d9f10adc1a866553780aeb42b" name="update-test-32bit-pkg" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="cb4d2d40fcc9f30c0b1160dda3b0844d5132fc3da4dc99ae2b0462924337214a" name="update-test-32bit-pkg" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="10126c641e4754e4c6e92a849568f732ec170290a13ff4f25f893760eaa164ad" name="update-test-affects-package-manager" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="d75f4f3de0c34961ff8cdc8e74dd49a560950e39dda1fc88ce34267cebeef196" name="update-test-affects-package-manager" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="b19d1b2b5f48b44eabfcb2edfe709d9d18cb8b3e9291be39a37caac599c9ed08" name="update-test-affects-package-manager" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="d90dab74f494e1baa583c8325e199ec148d643305b86c828d4f45e10696dbcdf" name="update-test-affects-package-manager" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="5233a364513e6d22a7fb136b27855da660a6bebcae80791e9c07dabc38b2c31b" name="update-test-broken" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="9e88f371ef6470e7aa3040c7fb86d99ff91e099e2ae2e286f6733dc9eb967f90" name="update-test-broken" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="a7ef26169a20b218fbdf09145df76809d43b8eed761aea9fffc7c57018f86ee5" name="update-test-broken" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="2a4dbdbc63a9b7e729f1c28baceebd00e8259c04b9f6f9cd04b577f37c441621" name="update-test-broken" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="cdbc85bbaae276846c9c04c0f9796910a3f4e994a8095f91f905c3a442c25296" name="update-test-feature" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="9e8b93d4e19a1555f14dfbb4f0591eb2d1a677318b878e72e386f2704386f864" name="update-test-feature" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="08e88deec3cdd3b8f12e363e004d83187c32fc1fa4883570b5f4927e1da6c692" name="update-test-feature" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="57e942fed129a7a868417aa74e48dd1ca55c23b21d7b372e7b82df53a8e9baa2" name="update-test-feature" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="d80d8c476424743946fbd8612c61b7c7addc474d886f76b21f0ac75573b53bd3" name="update-test-interactive" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="45d482efea85271d4644bf2ffba0dd94d7ad0ed3fd21b4d6a727b7b1c6d752e7" name="update-test-interactive" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="e085318effe7ec08cd8563fad6c7ada9a7126353e7bc00dd24a2324399de8ccd" name="update-test-interactive" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="320d0f26498001b6d7576e21227742e903975eeacc858ecbacfd545abd12ff57" name="update-test-interactive" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="399dbbf3c8b1630e4139c8022715e8fa9421f55878ceb48c76336e423b353c1a" name="update-test-optional" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="16ee2ade8ffa63be7c45f9c5a2d046627f4017578a1f8c21137420712e3cd790" name="update-test-optional" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="8a852beae93d3562717d86a1b96b6802e1f04eedf9a92ba796285571004ab4be" name="update-test-optional" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="5df57d95c43b0691675f033cf37810476d8b6d7863ca76569ce2b1a405f5e202" name="update-test-optional" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="ad45ca7eb05c7abbaadee483e78ec14ef98841a8349e018381c4d23cda631216" name="update-test-reboot-needed" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="8c776510b91e391b561eebd9b25bf5cb79718f29845a3ab6362e90fbf536b3fa" name="update-test-reboot-needed" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="9de1df4ce88b52ba9836138eb738a34fb0898e1a74b3afdb0e68bda1e851289a" name="update-test-reboot-needed" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="8557f9258f991322fb77eea1891ef7e92cb5e91010ee9f9f9084795d5326b99f" name="update-test-reboot-needed" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="b58e9b244974050cde14ef8d232e9ba0b72e15b5f03367bf1849638d64514b5d" name="update-test-relogin-suggested" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="6f752591d2c44a23e06785da1cc8dbc9284a015f8b5ce8ffae53ce23b3578687" name="update-test-relogin-suggested" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="648d7b8a526319ca7214cfaffbc6024893e3c5fdaeddccad8682e703e38d411b" name="update-test-relogin-suggested" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="8581da81856148ee6bf2f9c3ce462f6d42c4d15771cd698014fa8659848885e8" name="update-test-relogin-suggested" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="fa013e79d38b3634cc0a6484c80005570f3bfa23e52ed6fde13ca94687ef7980" name="update-test-retracted" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="57941733aa74990ba93050b57b20fba80df97097a5e42e27213b43aa11d1005e" name="update-test-retracted" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="04a78d5899c1f3152faae3fe444cba79ab094d35a2474f9a51f137ed25104a49" name="update-test-retracted" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="a60f384100004eef267a32cf03705361661058b0cf027687f6f1a426504f1150" name="update-test-retracted" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="b2b418c1dad8f8ae94b9d13bf1f084fa6049febc84afdd57a91801ed3c0692a8" name="update-test-security" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="bd7e3e2cf546399b71e3b2eb4261034b55730b8e6b861db2579df4423abf4089" name="update-test-security" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="dc5ee45e134b6535700b9d8b376f51cad0a40da7c0b85e29b1b95241ada4ee04" name="update-test-security" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="85748175df7fa09f9b7abc7f7b177d9e8c410f44b1b16b827aa45bafce7eaade" name="update-test-security" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="57ea07a9ef0bde3c75a1d5c26d902662f8a15438aafe144291ad89af05e7d317" name="update-test-trivial" arch="aarch64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="11f4f0c1fd1212be2134276dbb86a41837c0e56ed37265f89f4156e64350313f" name="update-test-trivial" arch="ppc64le">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="6c2aa39c8eb7146015c08b9dd60970827f3549ef7a3215fb5ddbcc7a2a504bfc" name="update-test-trivial" arch="s390x">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="9534acc1f2ef8487429a544a09af98947264caedac809f275c1f3a1df1b432b1" name="update-test-trivial" arch="src">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="hmuelle@suse.de" date="1161172800">- created initial update-test-trival package for testing our update
  stack</changelog>
  <changelog author="mvidner@suse.cz" date="1162987200">- Added subpackages to test other kinds of patches.
- 1.1</changelog>
  <changelog author="hmuelle@suse.de" date="1165233600">- Fixed specfile to avoid locale issues (Müller -&gt; Mueller)</changelog>
  <changelog author="hmuelle@suse.de" date="1169035200">- Fixed specfile and downgrade version to 1.2
  99.9 is reserved for "universal updates testing" during beta
  cycles</changelog>
  <changelog author="lrupp@suse.de" date="1171540800">- specfile rewrite:
  + create the documentation files inline:
    (add version, release and date)
  + use get_version_number.sh and get_release_number.sh
    for "easier" preparing mbuild numbers
- version 1.3-0</changelog>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="546d9f06e93879290b8dd6860c8b71894afb7f6f8fcb0350f750f3680f8d0832" name="update-test-trivial" arch="x86_64">
  <version epoch="0" ver="5.1" rel="150200.39.1"/>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
  <changelog author="mkravec@suse.com" date="1552996800">- Break broken package for all platforms</changelog>
  <changelog author="gboiko@suse.com" date="1587038400">- Add a retracted update test case</changelog>
</package>
<package pkgid="c289d823cc731446e983c626356c030105fea304d84272d134a3df659823cb2b" name="uriparser" arch="aarch64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="8cd483c2803cf35da9ebbe17ead4a92c5769a26ae49bedd67813aba401a3e270" name="uriparser" arch="ppc64le">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="ffc1b8dabb4b477a1352489d5eb52d22763630101a7ec7e79c2fa46f938d9693" name="uriparser" arch="s390x">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="f2e4b534392874de90111b5d59a58566a4f417fe9f4053984814ae58b5ced1ae" name="uriparser" arch="src">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="crrodriguez@suse.de" date="1220356800">- update to version 0.7.2
  Fixed: Bad cleanup logic in functions
  uriAddBaseUri(..)
    uriRemoveBaseUri(..)
    Previously you needed to call uriFreeUriMembers on return code
    URI_ERROR_MALLOC and only then. So that's why these functions now
    take cleanup off your shoulders. An extra call to uriFreeUriMembers
    from your side is still needed in case of success.
  * Soname: 1:7:0</changelog>
  <changelog author="schwab@suse.de" date="1220788800">- Remove conflicting libtool macros.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1230033600">- update to version 0.7.4:
  * fixes null pointer de-referencing and memory leaks in two places
- changes from 0.7.3:
  * fixes a small bug with parsing</changelog>
  <changelog author="meissner@suse.de" date="1252238400">- use correct version in .spec file, removed unnecessary CFLAGS/CXXFLAGS
  stuff now default.</changelog>
  <changelog author="davejplater@gmail.com" date="1270814400">- Update to version 0.7.5 fixed doxygen build with uriparser-0.7.5-doxygen.patch
- Upstream changes :-
  * Added: pkg-config file
  * Fixed: File Doxyfile.in was missing from release archives
    Thanks to Rakesh Pandit for reporting!
  * Fixed: Doc generation troubles
  * Changed: No longer shipping bundled libcpptest
  * Changed: New dependencies:
  - libcpptest 1.1.0 or later
  - pkg-config (for libcpptest detection)
    Both dependencies can be disable through configuring
    with --disable-test, which excludes the test suite
    from compilation.
  * Soname: 1:10:0</changelog>
  <changelog author="coolo@novell.com" date="1283774400">- fix compile, newer doxygen does not use .gif anymore</changelog>
  <changelog author="toddrme2178@gmail.com" date="1304251200">- Added 32bit compatibility libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="coolo@suse.com" date="1359892800">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Extend uriparser-0.7.5-doxygen.patch so doxygen does not
  generate timestamped files.</changelog>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="8a3e097580ef57628833c194ef7e61efda40c26695494783d9bd749d38d196c1" name="uriparser" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="c2547827c7162f014f0880febb7418cd28f884dd9f359e733165b86686ce4976" name="uriparser-devel" arch="aarch64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="2d2890825e5f0cfd3ac2a63dac6b6920cf3f19387eb1b1737df1298bfc3a832f" name="uriparser-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="7f3cb9bf1a4cbadddf3452fa3e68f73c723af13ff1245c12fb07c92a463632a3" name="uriparser-devel" arch="s390x">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="51e7444fdba22ec6183d87868d26d1821926f9b186e2ac7a7e0b0357ce4e8ed9" name="uriparser-devel" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="150000.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.8.1
  * Fixed: Sync URI_VER_* preprocessor defines (were at 0.7.6, bug #23)
  * Fixed: Bug in internal function that may flip uriEqualsUri results around
  * Added: Function uriAddBaseUriEx allowing to resolve URIs with
    a scheme identical to that of the base URI to resolve against
    as if the URI to resolve had no scheme specified, when flag
    URI_RESOLVE_IDENTICAL_SCHEME_COMPAT is specified (feature request #4)
  * Soname: 1:17:0
- Update uriparser-0.7.5-doxygen.patch
  &gt; uriparser-doxygen.patch
- Add pkgconfig(libxdot) require; new upstream dependency
- Update download source Url to current sourceforge location
- Split out uriparse binary into his own package</changelog>
  <changelog author="aloisio@gmx.com" date="1518091200">- Update to version 0.8.5
  * Changed: The uriparser project has moved from SourceForge to
    GitHub:
    Code + issue tracker: https://github.com/uriparser/uriparser
    New website: https://uriparser.github.io/
    Please update any links of yours, accordingly. Thank you!
  * Fixed: Memleak in out-of-memory clean-up code
    of URI normalization, related to SF.net bug #28.
    Thanks to Chris Hills for the report!
  * Fixed: Fix compilation of uriparse(1) on FreeBSD
    Thanks to Ed Schouten for the patch!
  * Fixed: Fix C90 compilation errors
    Thanks to Joel Cunningham for the patches!
  * Fixed: Space requirements documented for
    uriWindowsFilenameToUriStringA
    given URI "file://server1/file1.txt" (SF.net bug #31)
    Thanks to threedyd for the report!
  * Fixed: Compiler warnings
    Thanks to Joel Cunningham for the patches!
  * Fixed: Stop exporting internal function RemoveBaseUriImpl
    Thanks to Joel Cunningham for the report!
  * Fixed: API documentation front page no longer empty with
    Doxygen 1.8.13
  * Fixed: "make -C doc install" fixed for lack of .map files
  * Improved: Communicate that absolutePath is always URI_FALSE
    for URIs with a host in uriparse CLI tool output and Uri.h
    header
    (GitHub #2, SF.net #30)
  * Soname: 1:21:0
  version 0.8.4
  * Fixed: Stack overflow on parsing malformed IPv6 addresses with
    more than eigtht quads.  Thanks to Alexander Klink for the
    report!
  * Soname: 1:20:0
  version 0.8.3
  * Fixed: uriCompareRange reported NULL pointer and range of
    length zero as equal, by mistake.
    Thanks to Robert Kausch and his Coverity report.
  * Fixed: Use-after-free in out-of-memory code of uriMakeOwner.
    Thanks to Chris Hills and his Klocwork-based report (SF.net
    bug #28)
  * Soname: 1:19:0
  version 0.8.2
  * Fixed: Broken conversion from/to Windows network shares
    (SF.net bug #21)
    Thanks to Adam Gross and Dmitry Repkin!
  * Fixed: Limit uriCompareRange return values to -1/0/1 (SF.net
    bug #24)
    As a side effect, this fixes the test suite for AArch64.
    Thanks to Marcin Juszkiewicz for the patch!
  * Fixed: MinGW Makefile:
    LIB_DIR fixed from ../../lib leftover to ../../src (SF.net
    bug #27)
    Thanks to Dmytro Zagashev for the report!
  * Fixed: Add missing NULL checks to UriStringToFilename (SF.net
    bug #25)
    Thanks to Jerome Custodio for the report!
  * Changed: Leave inlining decisions to GCC
  * Soname: 1:18:0
- Refreshed uriparser-doxygen.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Remove pointless --with-pic (no effect with --disable-static)
- Ensure neutrality of description.</changelog>
  <changelog author="adam.majer@suse.de" date="1519128000">- Rename package to comply with openSUSE packaging guidelines
  (bnc#1081686, sr#577196)
- Rename changes and spec file and drop usage of pkg_name</changelog>
  <changelog author="jengelh@inai.de" date="1519128001">- Merge subpackage uriparse into uriparser main package,
  and rename liburiparser-devel to uriparser-devel.</changelog>
  <changelog author="adam.majer@suse.de" date="1519214400">- Fix Group of the library subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1519214401">- Package COPYING and other basic documentation
- Drop HTML documentation, for now, since it has no content.</changelog>
  <changelog author="adam.majer@suse.de" date="1542369600">- CVE-2018-19198.patch: fix an out-of-bounds write via a
  uriComposeQuery* or uriComposeQueryEx*
  (bsc#1115722, CVE-2018-19198)
- CVE-2018-19199.patch: fix integer overflow via a uriComposeQuery*
  or uriComposeQueryEx* function (bsc#1115723, CVE-2018-19199)
- CVE-2018-19200.patch: fix attempted operations on NULL input via
  a uriResetUri* function (bsc#1115724, CVE-2018-19200)
- enable unit tests, when cpptest-devel is available</changelog>
  <changelog author="adam.majer@suse.de" date="1547640000">- CVE-2018-20721.patch: fix an out-of-bounds read for incomplete
  URIs with IPv6 addresses with embedded IPv4 address
  (bsc#1122193, CVE-2018-20721)</changelog>
  <changelog author="gus.kenion@suse.com" date="1715947200">- CVE-2024-34402.patch: Protect against integer overflow in
  ComposeQueryEngine (bsc#1223887, CVE-2024-34402)
- CVE-2024-34403.patch: Protect against integer overflow in
  ComposeQueryMallocExMm (bsc#1223888, CVE-2024-34403)</changelog>
</package>
<package pkgid="f6e5f36493a540d479ecf1c582929f6dc26e1b9c28d11fad05cf15fe24004293" name="util-linux" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="74e33aa3e64fd0445d9bc6881eb4824f3a63c93bfc4e5a6c32a9ec48d178ca95" name="util-linux" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="43ca33d3c043d2abd67539a941a2ef87902ceecfab58652a7ff81b095f1da82d" name="util-linux" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="e2869893e193f9702c926d4f7cfcd8b361aee37d6ddf77f1b5e1f104f563893b" name="util-linux" arch="src">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="2ac38332c219bda2d5349e83ae3c94f83bf8d49d48a871c4b5a4b6d0ac9ad072" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="e5db77a6c1da101e8151673d78d107fc2ea8a5796b8d2d52371692994c6d1a3b" name="util-linux-lang" arch="noarch">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="bbaaf2fbe3b4d400e373810c237989bb484f7c1ad8e6a4315c34141616b2791b" name="util-linux-systemd" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="5a530acc13a814f42e2ed1ea0fd360323bf301becf335d66f8dc142de72717bd" name="util-linux-systemd" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="7995f215caefa8e44368b37f1ad714a1cfdf8451bfd90e12b9e6d8bd9e89dd8d" name="util-linux-systemd" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="9f5cbd6c21a11151d4e9f1f1848649ab2cc046212ad3c603cc4535c76d7bb7f1" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="19f6f15f190a7c2da19e02002d68dc8a003f467cd5be0053e2b4af9da96fc30c" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="285fde7558569dc6406c372eb61a0f7cde52915622b460bc5c5faa05b13ae334" name="util-linux-tty-tools" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="182afbb0be2bd15cd5b9048ff939c41177b922331cab9c64ca95beb021df3489" name="util-linux-tty-tools" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="1855002dec61219e216b32455e281325287ef2ac6247cde4f652c8170f893d34" name="util-linux-tty-tools" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="29d599cfe74a160b3b189d9a154212c6e493857b4d462d90a04f592a41272072" name="util-linux-tty-tools" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="94434d7f5d1f6b3c30cbb9ed8800c1c1d371a20c93666bb43d76294c138dfcac" name="uuidd" arch="aarch64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="b53432ba183bf7223428ca51630c936de82d553c7e167aa92a1da1bc515e90f6" name="uuidd" arch="ppc64le">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="615a2aec78f490b95fbb4d33fe36f58c742b81eefd6ee741e75880f88c3192e8" name="uuidd" arch="s390x">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="1f0d45ab5ca14d9ec091f1b6de6281855063fc0c57cbdb63b68d8739ce49aa7c" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.39.3" rel="150600.4.3.1"/>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
</package>
<package pkgid="1f702822ddfbb7e850d29f1fb0835380e089562830fb65e71b3d4c96f4d558aa" name="warewulf4" arch="aarch64">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="c0b12ce4e118247e076271ebf4edb372acce4377befb515ecba224e308aac643" name="warewulf4" arch="src">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="50dd3a4a30c6dc53b78a3f64af2c292a1e3526f6c1fe3f252d23b84ad5cf76da" name="warewulf4" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="78314ad7cf3080c761c6ebad9fc90946e8077e2973693bcccbf5eba8e91b4483" name="warewulf4-man" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="4a9272438897e79ff0a8a0b8a2bfdc70d05d3640fe0f71337b8dce44d0a5a4d3" name="warewulf4-overlay" arch="aarch64">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="a3f10ce91659d10b079e313208faf348fdc4e54db6987ad80afac6a0387a544e" name="warewulf4-overlay" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="6b6b6b606966fd5f9d50c612498c2c3bafad65f22f62fc5946c543f61ed4e5a1" name="warewulf4-overlay-slurm" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="150500.6.13.1"/>
  <changelog author="eich@suse.com" date="1675166400">- Add %sysusers_requires macro to account for missing dependencies
  (boo#1207802).</changelog>
  <changelog author="cgoll@suse.com" date="1675771200">- added CreateMt-Targets.patch
  which moonts in resolv.conf and files for SCC registration
- added config-ww4.sh which is used for initial configuration for
  simple network setups</changelog>
  <changelog author="cgoll@suse.com" date="1676548800">- added Fix-for-CVE-2022-41723.patch in order to fix CVE-2022-41723
  (bsc#1208301)
  Note: an updated vendor.tar.gz is also required
- use the static dhpd configuration, which means known nodes will not
  only be static configured, but also get their configured ip address
  via dhcp</changelog>
  <changelog author="cgoll@suse.com" date="1695297600">- removed the upstream ipxe binaries</changelog>
  <changelog author="cgoll@suse.com" date="1697112000">- check if automatic configured ip range doesn'y contain ip address
  of ww4 host (bsc#1215583)</changelog>
  <changelog author="cgoll@suse.com" date="1703160000">- updated to v4.5.0rc0 pre release with following new features:
  * disks, partitions and file systems can set in the configration
    and if ignition is present in the container, changes to the disks will be
    made
  * grub can be used as alternative boot method instead of iPXE. The
    grub binairy is extracted from the container and shim is executed before
    the grub. This enables secure boot
  * wwctl has now the genconfig subcommand which will print/create
    valid configurations
  * all paths e.g the overlay dir, can now be configured in warewulf.conf
- notable bug fixes are:
  * Fixed a bug where profile tags were erroneously overridden by empty node
    values.
  * Fixed bug where tags from profiles weren't rendered
- added grub-boot.patch which includes the not merged grub support
- removed make-ipxe-binary-source-configureable.patch
  CreateMt-Targets.patch,
  Fix-for-CVE-2022-41723.patch as incoperated upstream</changelog>
  <changelog author="cgoll@suse.com" date="1705492800">- added documentation for replacing dhcpd and tftp with dnsmasq
  as README.dnsmasq (jira#HPC-65)
- added following patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch</changelog>
  <changelog author="cgoll@suse.com" date="1705665600">- moved to git archive hash as source in order to be reproducible
- added vendor.tar.gz as git hash source doesn't have vendoring
- removed grub-boot.patch as incorporated upstreams</changelog>
  <changelog author="cgoll@suse.com" date="1706097600">- make only overlay dir beeing config files</changelog>
  <changelog author="eich@suse.com" date="1707307200">- Rename: warewulf4-doc -&gt; warewulf4-man.
- Rename: warewulf4-slurm -&gt; warewulf4-overlay-slurm
- Set warewulf4-man and warewulf4-overlay-slurm to noarch.
- Use bash for config-warewulf.sh
- Improved rpmlint filters.</changelog>
  <changelog author="eich@suse.com" date="1708344000">- Move example templates for client overlays to example-templates/
  in the package documentation.</changelog>
  <changelog author="cgoll@suse.com" date="1708344001">- updated to 4.5.0rc1 from upstream with following change:
  * all overlays reside now under a `rootfs` diretory e.g.
    the host overlays reside now under
    `/var/lib/warewulf/host/rootfs`
    This has the advantage that the `rootfs` can be under a version
    control, without the effect that the meta files e.g. `.git` will
    show up in the rendered overlays.
- removed patches:
  * clean-warewulf-conf.patch
  * dnsmasq-template-move.patch
  * removed vendor.tar.gz</changelog>
  <changelog author="cgoll@suse.com" date="1708603200">- updated to 4.5.0rc2. This fixes:
  * `wwctl node list` panics if a node uses a profile with a
    network which isn't present on this node (bsc#1220189).</changelog>
  <changelog author="eich@suse.com" date="1711108800">- Allow to install dnsmasq as an alternative to dhcp-server.
- Set minimum UID value for user UIDs to 1000 (boo#1221886).
- Make dependencies warewulf package version dependent. This
  helps to keep the resolver to mix different packages from
  different versions.
- On upgrade from older versions move files from
  `/usr/share/warewulf/overlays/` to
  `/var/lib/warewulf/overlays/*/rootfs/`
  * Added: adjust_overlays.sh.</changelog>
  <changelog author="cgoll@suse.com" date="1711368000">- updated to 4.5.0 which has no functional changes to rc2
- added fixed-ShimFind-for-aarch64.patch to fix (bsc#1221133)</changelog>
  <changelog author="eich@suse.com" date="1711454400">- %ghost /etc/profile.d/setup-ssh.[c]sh</changelog>
  <changelog author="cgoll@suse.com" date="1712318400">- use tftp.socket for activation not service (bsc#1216994)</changelog>
  <changelog author="cgoll@suse.com" date="1715601600">- updated to version 4.5.1 with following changes
  * wwctl [profile|node] list -a handles now slices correclty
  * Fix a locking issue with concurrent read/writes for node status
- removed fixed-ShimFind-for-aarch64.patch as incoperated upstreams
- Remove API package as use of this wasn't documented</changelog>
  <changelog author="cgoll@suse.com" date="1715688000">- update to 4.5.2 with followin changes:
  * Reorder dnsmasq config to put iPXE last
  * Update a dependency to fix CVE-2024-3727 (bsc#1224124)</changelog>
  <changelog author="cgoll@suse.com" date="1716811200">- added wwctl-configure-all-calls-SSH-keys.patch to fix
  (bsc#1225402)</changelog>
</package>
<package pkgid="d46af51d662bf52dff5126c8abc6178f6c4eb1fd73404f43192ca9a2284dc0c2" name="webkit-jsc-4" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="cfb6ffa7b5b472d5bae8dd69d57bad192fc4e75e0a781e422fa4312ef65f3b62" name="webkit-jsc-4" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="b46fe1f80a51103da708b4f17ebcdf18dbb083ad54322d4c4126f05050fe7d59" name="webkit-jsc-4" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="5e904cd8cd7ddd83bbfaaab59be6b5ad0b55bd6a24cfd5e8eff606779e5fdc70" name="webkit-jsc-4" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="349a34d2a2a5d8aec3a1530dfafc8b4d43d5002c0512dd44682b3a6a9912e9f7" name="webkit-jsc-4.1" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="813c56fbb0efbb3e50cda5895adac3eec9755f5539b824122f85f0cd8b727c2d" name="webkit-jsc-4.1" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="64a17451e95407133764fdedb507d3ce9e976ae0c2654d190028dc3bd29614b3" name="webkit-jsc-4.1" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="714ef7804faf48ae28eaf1d907cc8cbcfaa9524417516abc415f72e16391bd1f" name="webkit-jsc-4.1" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="767883faa384aea6b169f19c831fb476fb1fe6da5c9e76a50f31a777defed0ea" name="webkit-jsc-6.0" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9977d8192fd2a018be3c652d975211e1fc09697b275287b240f9fa7c2038819a" name="webkit-jsc-6.0" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="c362fa4b8272317959d5db4eb9bf0d744d01ea8dff5d17812091b432503bc86f" name="webkit-jsc-6.0" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="5507f3c02799ae866209d405bc4973194d7756a2c28d62095c30cfc955a02bb1" name="webkit-jsc-6.0" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="d43bf24537b72ea057cc5b036189288fadc09094f555c3f227aa4b881f6324c0" name="webkit2gtk-4_0-injected-bundles" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="acd31a9be92927f60cf3f9745d2117ec3d51be6fbb3c2f5f97fec70742a355e0" name="webkit2gtk-4_0-injected-bundles" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="0e7e8414170f2a37e0f3fdc0b085d508bdf1c0e2a274cb0fda458a02cdb3bfe0" name="webkit2gtk-4_0-injected-bundles" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="a24cdeadd51c9c7ced25520c32533f84cb1b4cbd30f42a05d23190dac95ccd0c" name="webkit2gtk-4_0-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="4e08347acaaed61c391fa39c97ef865f097f10be04e5991686cb2a2fa3a69135" name="webkit2gtk-4_1-injected-bundles" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="ff5be1b756be69cd95c2851d2dd08d166bca31588fb595dd05de4ab486f25409" name="webkit2gtk-4_1-injected-bundles" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="c0a4f8abfa5e26e5912d4439cde7d2befbbec61b662f29526cd91bb8b3518faf" name="webkit2gtk-4_1-injected-bundles" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9b77f3f5d4d7aebeef78e42ff8a25d00ac0fc2094fd321298f51e67eab5e686b" name="webkit2gtk-4_1-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="23b83378e9b27ba05ac8d933e97d93dcb2840a01f09c102af3cbce476c2f39ec" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="b1f725d887e08e4f30389bce7a6327768a2ed929d2a5e285ce2c015a75fda98f" name="webkit2gtk3-devel" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="b1382413a7f2c53da3b39154c2627ad6b7d1df602d59c05597f408ee3908fad1" name="webkit2gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f59824bbedf8bea4704ab5cccbe8aeb4925e4e68c1df1505c20ac47f1e6d671d" name="webkit2gtk3-devel" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="9487398e74bd9fd4b51946158c7f960141dca3028625ac8eb630635e13e3df51" name="webkit2gtk3-devel" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="424b8e70663daf866a2a15def8782798489f6fdba3bde5daaef270dab7038ba1" name="webkit2gtk3-minibrowser" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="469d393b77dbefefb48da5f5f42979aca32bccf90e7a085516158d4e7afc2d05" name="webkit2gtk3-minibrowser" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="38996890a44b322e67c680f61d531754e297eb0bea14a5e4e64e694f6dae243f" name="webkit2gtk3-minibrowser" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="dc5c92d357d35d960ca0830e4d1db09ecbc8de3afd0f071d6f8ed90916025c19" name="webkit2gtk3-minibrowser" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="0d0f004c868b9991fb14835f464575bf94b7277349b6c59323a291a000d868df" name="webkit2gtk3-soup2" arch="src">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="b2dafd75be0f026b340e450768600b46efd486d634c6c627661ab9bb8db55a3a" name="webkit2gtk3-soup2-devel" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="a693eb6afc4fb7de462a5b756865c41f6e665e76c52b3ba856052df220bae547" name="webkit2gtk3-soup2-devel" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f6b88a056530b23295e3963863bbdc31428a2e6198dd642f73b0a81318115556" name="webkit2gtk3-soup2-devel" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="1ab6a70e1f28df0bc5333b12b07c2dbc430ecf75017e58ccf39590b04ce6aec1" name="webkit2gtk3-soup2-devel" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="4fab694e045b8fa002e4349203ff153c3957480f93587a9dcef3f70e66213a51" name="webkit2gtk3-soup2-minibrowser" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="7c3c317b480f24c4472e09511b50c8e0485393b75ffe55a555845c437dbff6ff" name="webkit2gtk3-soup2-minibrowser" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="974496deda350e3ebd5f31db515efa6cde0c24e43e8ba39c96b4e24927a83ccc" name="webkit2gtk3-soup2-minibrowser" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="96a88e413f2f2edcecb433f5359012a6986889c4bc314e3a49bd33fd77208d72" name="webkit2gtk3-soup2-minibrowser" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="8fa93e121f729baf033db21f6c4bc9f41ad7f2b3595b7cbe227ee0e817e53464" name="webkit2gtk4" arch="src">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="7f39bc915d8ea24e13375a2ab5965cfd20ff5fc855622a0eda4648bb46d27661" name="webkit2gtk4-devel" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="ee7e0c786ba11a9d1f5ea61489436ade8ad76766540ac3dcdda91b75c9c61817" name="webkit2gtk4-devel" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="288baa1c54f2dad8f7d21dfad959079af8f1e0d9f0cd40e188157cb34473b7d3" name="webkit2gtk4-devel" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="c5b04880b0a36515bca2acbe934bbe75c581f6c96dd7b3b9b15e71dba50ee007" name="webkit2gtk4-devel" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="452773cc92cb0486fc0113a1aef5a4ef18d4e0e0b7b324752ec41940a6e0487d" name="webkit2gtk4-minibrowser" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="fdf5ddb05f42cc516205a057a622406238bd78c378b263239bf33f46d11b35a5" name="webkit2gtk4-minibrowser" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="ebeb4d8d5f2cb0b64d2cf5cce9d56df7b5a00d02d70a42f4873cb856bc71097a" name="webkit2gtk4-minibrowser" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="05b42ad14184c9bac4eff2eb531a9050b411e50dc85f298a229489efd1949113" name="webkit2gtk4-minibrowser" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="dcdbfc32280bcd67bb4f44f69c2d99a6d6395c7143eabeeb2830728b4e6367e8" name="webkitgtk-6_0-injected-bundles" arch="aarch64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="f10556cd9e0ee1de677e8d5ec8c423590507567bbad653c92f93928fb348ab7f" name="webkitgtk-6_0-injected-bundles" arch="ppc64le">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="db46d603815d4206248c0eb250d75d2c484de6a412d8165818fdfc8f2b9aaaa8" name="webkitgtk-6_0-injected-bundles" arch="s390x">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="88466683fce5895fb474fa092d0ed424f75dc13952542879f58189bab191820e" name="webkitgtk-6_0-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.44.2" rel="150600.12.3.1"/>
  <changelog author="mgorse@suse.com" date="1692619200">- Update to version 2.41.91:
  + Properly handle toplevel window state changes in GTK4.
  + Do not keep processing frames while the view is unrealized
    when using DMA-BUF renderer.
  + Fallback to first render node returned by DRM when failing to
    get using EGLDevice.
  + Fix the build with libjxl &lt; 0.7.0.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693483200">- Add explicit pkgconfig(epoxy) and pkgconfig(xdamage)
  BuildRequires: meson setup checks for them, so we should list
  them.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693569600">- Expand lang sub-package in spec file unconditionally to handle
  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
  change affected the automatic generated Requires tag on
  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
  required and what's being provided. Now, any sub-package that was
  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
  instead (boo#1214835, boo#1214640, boo#1214093).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694433600">- Update to version 2.41.92:
  + Fix render updates after cross origin history navigation with
    GTK4.
  + Fix flickering in non accelerated compositing mode.
  + Fix pixelated accelerated blur filter.
  + Fix web process launching when xdg-dbus-proxy is not installed.
  + Pass GBM_BO_USE_RENDERING to gbm_bo_create.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 2.42.0 (boo#1218033):
  + New renderer based on DMA-BUF shared buffers.
  + Add new permission request to handle DOM paste access requests.
  + Add API to configure experimental features at runtime.
  + Add API to set the percentage of volume space that can be used
    for data storage.
  + GBM is no longer required for WebGL implementation.
  + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
    CVE-2023-42890, CVE-2014-1745.</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695988800">- Update to version 2.42.1 (boo#1215661 boo#1215866 boo#1215867
  boo#1215868 boo#1215869 boo#1215870):
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41993, CVE-2023-40414.</changelog>
  <changelog author="mgorse@suse.com" date="1698062400">- Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider
  of EglDestroyImage Found" (boo#1216483).</changelog>
  <changelog author="mgorse@suse.com" date="1698840000">- Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf
  renderer for NVIDIA proprietary drivers (boo#1216778).</changelog>
  <changelog author="mgorse@suse.com" date="1700136000">- Update to version 2.42.2 (boo#1217210):
  + Bump Safari version in user agent header.
  + Fix CSP regression that broke Unity WebGL applications.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-41983, CVE-2023-42852.</changelog>
  <changelog author="dimstar@opensuse.org" date="1700568000">- Ensure max_link_jobs and max_compile_jobs have valid values even
  when %{jobs} is not defined (like when building outside of OBS).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
</package>
<package pkgid="29588a3cd65834752ee31d164ac9eff6c50cf4b1c51453e0fef9dbdf26607b17" name="wicked" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="362243e66f3316fa0840f768b84830bc2bff457e38b22ef639b8462cd03290c9" name="wicked" arch="ppc64le">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="402e1a258ae7e2f04ac5a71b262d6b80d83b05c32bc6063dba8131eac7978095" name="wicked" arch="s390x">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="e530ca55e6f910ba20cdd79c3506c3c7e3a860702c4839cb381c3bac179772d5" name="wicked" arch="src">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="3cf4670457bc643d7eabcfdba3ff1a1d7c103d59b1c5aa6f76520e268d6c7fbb" name="wicked" arch="x86_64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="a1388bcf6df28ec8446c316b14fafab955732aeca327fa43a38456a5d981fc27" name="wicked-nbft" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="f09ef91b9b6ba6bf4dfcd434c5ab529507404b5035fd5afe976109d6ff41ea46" name="wicked-nbft" arch="ppc64le">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="d0b9dc4d0fc6f87ec573e8b7cb8623298e919b157d4f522d68551e487e5fe82b" name="wicked-nbft" arch="s390x">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="d47977a43d147a06da86bc58eafd13b04bff90583aeaa411e2c145bb38b52721" name="wicked-nbft" arch="x86_64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="523623323b5e8af418080b72a91b15bb005f36f1b4007c9c413272bfe93d5729" name="wicked-service" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="43f9fc79210a29695e742a791cf3c797756db423dc84de7da6ac4d703adbb28a" name="wicked-service" arch="ppc64le">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="cc5d1e268be312c6b05734b7fb7ed9a9e3a2a1aa7bd3b05138c194ed41ada9bb" name="wicked-service" arch="s390x">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="789a1cae0a94159eebefdcc55aeb8859767dfc8a70ce3d4a3b531ac9f8935c57" name="wicked-service" arch="x86_64">
  <version epoch="0" ver="0.6.75" rel="150600.11.3.4"/>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="mt@suse.com" date="1670846400">- spec: Add /etc/sysconfig/network to file list, no longer
  in the default list of a cleaned up filesystem package
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="mt@suse.com" date="1671624000">- version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes</changelog>
  <changelog author="mt@suse.com" date="1674648000">- version 0.6.72
- nbft: introduced new wicked-nbft sub-package to setup network interfaces using NBFT
  firmware configuration according to the NVM Express Boot Specification 1.0 (jsc#PED-3132)
- client: add `wicked firmware extensions|interfaces|enable|disable` command to
  improve `ibft`,`nbft`,`redfish` firmware extension and interface handling (jsc#PED-3132)
- client: improve error handling in netif firmware discovery extension execution
- appconfig: improved to handle extension definition overrides in the wicked-config
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise link mode map names</changelog>
  <changelog author="mt@suse.com" date="1676030400">- bond: workaround 6.1 kernel enslave regression (boo#1206674)
  The kernel bond enslave rtnetlink message processing changed
  breaking an `ip link set down master bond0 dev eth0` like
  enslave which worked with all kernels from 4.12 up to 6.0.
  [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch]</changelog>
  <changelog author="mt@suse.com" date="1684929600">- extensions/nbft: add post-up script (bsc#1211647)
  In multipath scenarios, not all NBFT interfaces and respective
  connections may have been brought up during initramfs processing.
  If wicked brings up some NBFT interfaces after switching to the
  root file system, run a post-up script to initiate the NVMe
  connections.
  [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1706788800">- ifreload: VLAN changes require device deletion (bsc#1218927)
  [+ 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
- ifcheck: fix config changed check (bsc#1218926)
  [+ 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
- client: fix exit code for no-carrier status (bsc#1219265)
  [+ 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
  [+ 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
- duid: fix comment for v6time
  (https://github.com/openSUSE/wicked/pull/989)
  [+ 0005-duid-fix-comment-for-v6time.patch]
- rtnl: fix peer address parsing for non ptp-interfaces
  (https://github.com/openSUSE/wicked/pull/987,
  https://github.com/openSUSE/wicked/pull/988)
  [+ 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [+ 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
- system-updater: Parse updater format from XML configuration to
  ensure install calls can run.
  (https://github.com/openSUSE/wicked/pull/985)
  [+ 0002-system-updater-Parse-updater-format-from-XML-configu.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1708689600">- update to version 0.6.74
  + team: add new options like link_watch_policy (jsc#PED-7183)
  + Fix memory leaks in dbus variant destroy and fsm free (gh#openSUSE/wicked#1001)
  + xpath: allow underscore in node identifier (gh#openSUSE/wicked#999)
  + vxlan: don't format unknown rtnl attrs (bsc#1219751)
- removed patches included in the source archive:
  [- 0009-ifreload-VLAN-changes-require-device-deletion-bsc-12.patch]
  [- 0008-ifcheck-fix-config-changed-check-bsc-1218926.patch]
  [- 0007-Fix-ifstatus-exit-code-for-NI_WICKED_ST_NO_CARRIER-s.patch]
  [- 0006-dhcp6-omit-the-SO_REUSEPORT-option-bsc-1215692.patch]
  [- 0005-duid-fix-comment-for-v6time.patch]
  [- 0004-rtnl-parse-peer-address-on-non-ptp-interfaces.patch]
  [- 0003-rtnl-pass-ifname-in-newaddr-parsing-and-logging.patch]
  [- 0002-system-updater-Parse-updater-format-from-XML-configu.patch]
  [- 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
  <changelog author="mt@suse.com" date="1710417600">- addrconf: fix fallback-lease drop (bsc#1220996)
  [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
- extensions/nbft: use upstream `nvme nbft show` (bsc#1221358)
  [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1710849600">- hide secrets in debug log (bsc#1221194)
  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712664000">- client: do not convert sec to msec twice (bsc#1222105)
  [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715169600">- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
  - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
    and consistently use config and state info attached to the port
    interface as in rtnetlink(7).
  - Cleanup ifcfg parsing, schema configuration and service properties
  - Migrate ports in xml config and policies already applied in nanny
  - Remove "missed config" generation from finite state machine, which
    is completed while parsing the config or while xml config migration.
  - Issue a warning when "lower" interface (e.g. eth0) config is missed
    while parsing config depending on it (e.g. eth0.42 vlan).
  - Resolve ovs master to the effective bridge in config and wickedd
  - Implement netif-check-state require checks using system relations
    from wickedd/kernel instead of config relations for ifdown and add
    linkDown and deleteDevice checks to all master and lower references.
  - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
    system/config interface hierarchies as notice with +/- marked
    interfaces to setup and/or shutdown.
- Removed patches included in the source archive:
  [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch]
  [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]
  [- 0003-move-all-attribute-definitions-to-compiler-h.patch]
  [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
  [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch]</changelog>
  <changelog author="mt@suse.com" date="1715774400">- client: fix ifreload to pull UP ports/links again when the config
  of their master/lower changed (bsc#1224100,gh#openSUSE/wicked#1014).
  [+ 0001-ifreload-pull-UP-again-on-master-lower-changes-bsc1224100.patch]</changelog>
</package>
<package pkgid="281ca2c7ebeb324e8acf8693710e6a359ee98756d16054d3391e47dc91d6277e" name="wireshark-plugin-libvirt" arch="aarch64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="0d9534871da72158fd7ac131ec75d4d6fe59059cef8a8b44f9343bfa494b0652" name="wireshark-plugin-libvirt" arch="ppc64le">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="249f2542943a826843b0b99c2b8267319112f4eba0faa9e3884bbd1a300422df" name="wireshark-plugin-libvirt" arch="s390x">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="4660ea0dfa98292772e9df59c0807bec4c8419af954e996fa20a737b58d9e2e0" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="150600.8.3.1"/>
  <changelog author="jfehlig@suse.com" date="1692273600">- spec: Disable Xen driver in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1692964800">- spec: Disable Apparmor support in ALP-based products
- spec: Disable interface driver in ALP-based products
- spec: Disable sanlock plugin in ALP-based products
- spec: Disable numad support in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1694001600">- Update to libvirt 9.7.0 (jsc#PED-3279)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-7-0-2023-09-01
- spec: Unconditionally enable modular daemons (jsc#PED-6303)
- spec: Disable ESX hypervisor driver in ALP-based products
- spec: Disable glusterfs storage backend in ALP-based products</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- Update to libvirt 9.8.0 (jsc#PED-3279)
  - bsc#1215708
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-8-0-2023-10-02</changelog>
  <changelog author="jfehlig@suse.com" date="1697544000">- spec: Disable use of libnbd/nbdkit
  bsc#1216274</changelog>
  <changelog author="jfehlig@suse.com" date="1697630400">- supportconfig: Adapt plugin to modern supportconfig</changelog>
  <changelog author="jfehlig@suse.com" date="1698840000">- Update to libvirt 9.9.0
  - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-9-0-2023-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1701432000">- Update to libvirt 9.10.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-10-0-2023-12-01
- spec: Drop 'Requires: libvirt-daemon-proxy' from the
  libvirt-daemon-{qemu,xen,lxc,vbox} subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1702036800">- Add upstream commit 1a2f33cb59 to fix memory corruption in the
  remote driver</changelog>
  <changelog author="jfehlig@suse.com" date="1703073600">- apparmor: Add capabilities for PCI passthrough to virtxend profile
  bsc#1216656</changelog>
  <changelog author="jfehlig@suse.com" date="1705406400">- Update to libvirt 10.0.0
  - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432,
    jsc#PED-6851
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-0-0-2024-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1705492800">- Add temporary build fix for ppc64le
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1706184000">- Replace temporary build fix with upstream equivalent
  bsc#1218823</changelog>
  <changelog author="jfehlig@suse.com" date="1708516800">- Fix return value when libnetcontrol fails to initialize
  boo#1219986</changelog>
  <changelog author="jfehlig@suse.com" date="1708603200">- Add SLE virtiofsd path to apparmor profiles
  bsc#1219772</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711540800">- qemu: Fix migration from libvirt older than 9.10.0 when vmx is enabled
  bsc#1221879</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
</package>
<package pkgid="96705ff151926e4e6fd9d20d0a92a844d6d29a37bfc3c95e50f9753e7bc74318" name="xfsprogs" arch="aarch64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="03b3a5b2938ff466c5fe3a52b4b046a3afbdad165f41e3e8c0c3fd524b59f89a" name="xfsprogs" arch="ppc64le">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="54944223b99cc509ede843300936422ec006b8f67547e6fd274ff91ab8e743fa" name="xfsprogs" arch="s390x">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="b7e41efc0075c95cb216b0f74a1a6a03144a9feeceeaeccbadd890450acf1eeb" name="xfsprogs" arch="src">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="4725f0f4a9cab21477a18b55cbd4e6f9388693350948ee281bbf2b5f7f3b56a8" name="xfsprogs" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="636409c5564dbc3eb3aa525fd6bdc013130593b64d87f02f73ec82a1e2bcb6f0" name="xfsprogs-devel" arch="aarch64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="cd4e2c8577877a6310a71b186911174c89808fe747e930cb4dcc6e59e3e911b6" name="xfsprogs-devel" arch="ppc64le">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="a73d5e3c51e8fb04dc8f167d64a78d9322940ddf6bd5d4e9b7abdaeba67afd72" name="xfsprogs-devel" arch="s390x">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="ecd694a78ed4c167fd4d1ed1f4b7a8122d53983516ff40a73d3256c478280a0e" name="xfsprogs-devel" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="994d4c1487c95f3d06bc766509aeda5249831f03eec93553709a4f89c0a430bc" name="xfsprogs-scrub" arch="aarch64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="e12e259dd7d7425d44346b41bb3a3dd7268e75f0ac081dd52c47d2e1d5cd3d8f" name="xfsprogs-scrub" arch="ppc64le">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="a98c75489ca15bb450e8681100086fd94801a2c18eaae05a80475cac79d3a97d" name="xfsprogs-scrub" arch="s390x">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="9efaca9007837164148085ecb4ab4bb01c42178bc56b5d05cc392e0c8fea1e34" name="xfsprogs-scrub" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="150600.3.3.1"/>
  <changelog author="coolo@suse.com" date="1566043200">- update to v5.2.0
  - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
  - libxfs changes merged from kernel 5.2
  - mkfs: enable reflink by default (Darrick Wong)
  - mkfs: fix stripe unit handling (Allison Collins)
  - mkfs: remove useless log options in usage() (Yang Xu)
  - mkfs: validate start and end of aligned logs (Darrick Wong)
  - xfs_quota: fix built-in help for project setup (Eric Sandeen)
  - xfs_io: allow passing an open file to copy_range (Amir Goldstein)
  - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
  - man: break out several ioctl man pages (Darrick Wong)
  - man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
  - xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
  - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
  - libfrog: fix bitmap return values (Darrick Wong)
  - libfrog: don't set negative errno in conversion f'ns (Darrick Wong)</changelog>
  <changelog author="seanlew@opensuse.org" date="1575547200">- update to v.5.3.0
  * mkfs.xfs: use libfx to write out AGs versus open coding
  * mkfs.xfs: fix incorrect error message during AG init
  * xfs_repair: better info when metadata updates fail
  * xfs_growfs: allow mounted device node as argument
  * xfs_spaceman: always report sick metadata
  * xfs_io: add a bulkstat command
  * xfs_io: encrypt command enhancements
  * xfs_io: copy_file_range fixes
  * man: document several new ioctls
  * xfs_scrub: copious rewriting
  * libfrog: header moves, refactoring, updates
  * libxfs: fix buffer refcounting</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003200">- update to v5.4.0:
  * xfsprogs: Release v5.4.0
  * xfsprogs: Release v5.4.0-rc1
  * mkfs: tidy up discard notifications
  * mkfs: Break block discard into chunks of 2 GB
  * xfs_admin: enable online label getting and setting
  * xfs_admin: support external log devices
  * xfsprogs: add missing line feeds in libxfs/rdwr.c
  * xfsprogs: remove stray libxfs whitespace
  * xfsprogs: Release v5.4.0-rc0
  * xfs: change the seconds fields in xfs_bulkstat to signed
  * xfs: move local to extent inode logging into bmap helper
  * xfs: remove broken error handling on failed attr sf to leaf change
  * xfs: log the inode on directory sf to block format change
  * xfs: remove unused flags arg from xfs_get_aghdr_buf()
  * xfs: log proper length of superblock
  * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
  * xfs: convert inode to extent format after extent merge due to shift
  * xfs: define a flags field for the AG geometry ioctl structure
  * xfs: add a xfs_valid_startblock helper
  * xfs: remove the unused XFS_ALLOC_USERDATA flag
  * xfs: allocate xattr buffer on demand
  * xfs: consolidate attribute value copying
  * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
  * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
  * xfs: make attr lookup returns consistent
  * xfs: reverse search directory freespace indexes
  * xfs: speed up directory bestfree block scanning
  * xfs: factor free block index lookup from xfs_dir2_node_addname_int()
  * xfs: factor data block addition from xfs_dir2_node_addname_int()
  * xfs: move xfs_dir2_addname()
  * xfs: remove all *_ITER_CONTINUE values
  * xfs: remove all *_ITER_ABORT values
  * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
  * xfs: remove unnecessary int returns from deferred bmap functions
  * xfs: remove unnecessary int returns from deferred refcount functions
  * xfs: remove unnecessary int returns from deferred rmap functions
  * xfs: remove unnecessary parameter from xfs_iext_inc_seq
  * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
  * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
  * xfs: fix maxicount division by zero error
  * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify'
  * xfs: add kmem allocation trace points
  * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.</changelog>
  <changelog author="ailiopoulos@suse.com" date="1579003201">- split xfs scrubbing scripts and service files into a separate optional
  package, in order to avoid having python as a dependency in the main
  xfsprogs rpm (bsc#1157438).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1584187200">- update to v5.5.0:
  * xfsprogs: actually check that writes succeeded
  * mkfs.xfs: check root inode location
  * mkfs.xfs: efficient block zeroing
  * xfs_repair: fix broken unit conv. in dir invalidation
  * xfs_repair: fix bad next_unlinked field
  * xfs_repair: don't corrupt attr fork clearing forw/back
  * xfs_repair: check root dir pointer before trashing it
  * xfs_repair: try to fix sb_unit value from secondaries
  * libxfs changes merged from kernel 5.5</changelog>
  <changelog author="ailiopoulos@suse.com" date="1586952000">- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6</changelog>
  <changelog author="ailiopoulos@suse.com" date="1595592000">- update to v5.7.0:
  * xfs_io: document '-q' option for sendfile command
  * remove libreadline support
  * xfs_quota: allow individual timer extension
  * xfs_quota: fix unsigned int id comparisons
  * xfs_repair: fix progress reporting
  * xfs_repair: fix minrecs error during phase5 btree rebuild
  * xfs_repair: add missing validations to match xfs_check
  * xfs_repair: use btree bulk loading
  * xfs_io: fix copy_range argument parsing
  * xfs_io: document -q option for pread/pwrite command
  * xfs_metadump: man page fixes
  * xfs_db: fix crc invalidation segfault
  * libxfs changes merged from kernel 5.7</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ailiop@suse.com" date="1599480000">- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8</changelog>
  <changelog author="ailiop@suse.com" date="1603195200">- update to v5.9.0:
  * mkfs.xfs: disallow creation of RT files from proto file
  * mkfs.xfs: fix ASSERT on small device with stripe geom
  * xfs_repair: more fixes from fuzz-testing
  * libhandle: fix potential unterminated string problem
  * libhandle: libfrog: fix a potential null pointer deref
  * man: install all manpages that redirect to another page
  * man: fix ioctl_xfs_geometry manpage naming
  * xfsprogs: various realtime related fixes
  * xfsprogs: ignore autofs mount table entries
  * libxfs: make buffers track the per-ag structures
  * libxfs changes merged from kernel 5.9</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 5.10.0:
  - xfs_repair: remove old code for mountpoint inodes
  - xfsprogs: Add inode btree counter feature
  - xfsprogs: Add bigtime feature for Y2038
  - xfsprogs: Polish translation update
  - mkfs.xfs: Add config file feature
  - mkfs.xfs: allow users to specify rtinherit=0
  - xfs_repair: simplify bmap_next_offset
  - man: various manpage updates
  - libxfs: remove some old dead code
  - libxfs: add realtime extent tracking
  - libxfs changes merged from kernel 5.10
- refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  against libxfs changes</changelog>
  <changelog author="ailiop@suse.com" date="1615636800">- update to v5.11.0:
  - xfs_admin: don't hide xfs_repair output when upgrading
  - man: document attr2, ikeep option deprecation in xfs.5
  - mkfs: make use of xfs_validate_stripe_geometry()
  - mkfs: fix wrong inobtcount usage error output
  - xfs_repair: enable bigtime upgrade via repair
  - xfs_repair: enable inobtcount upgrade via repair
  - xfs_repair: set NEEDSREPAIR on first write
  - xfs_repair: clear the needsrepair flag when done
  - xfs_repair: check dquot id and type
  - xfs_fsr: Verify bulkstat version in qsort's cmp()
  - xfs_fsr: Interpret args of qsort's cmp() correctly
  - xfs_scrub: load and unload libicu properly
  - xfs_scrub: various fixes
  - xfs_admin: support adding features to V5 filesystems
  - xfs_admin: support filesystems with realtime devices
  - man: mark all deprecated V4 format options
  - misc: fix valgrind complaints
  - xfs_db: disallow label/uuid setting if NEEDSREPAIR
  - xfs_db: show NEEDSREPAIR in check &amp; version commands
  - xfs_db: add an ls command
  - xfs_db: add a directory path lookup command
  - libxfs changes merged from kernel 5.11</changelog>
  <changelog author="ailiop@suse.com" date="1621944000">- update to v5.12.0:
  - mkfs: don't default to too-large physical sector size
  - repair: phase 6 speedups
  - man: Add dax mount option to man xfs(5)
  - xfs_admin: pick up log arguments correctly
  - xfs_growfs: support shrinking unused space
  - libfrog: report inobtcount in geometry
  - xfs_logprint: Fix buffer overflow printing quotaoff
  - xfsprogs: include &lt;signal.h&gt; for platform_crash
  - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag
  - workqueue: bound maximum queue depth
  - libxfs changes merged from kernel 5.12</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- mkfs: disable reflink support by default (jsc#SLE-17360)
  - Add xfsprogs-mkfs-disable-reflink-support-by-default.patch
  Do not format xfs filesystems with reflink support by default, as the
  feature is read-only compatible, and read-write compatibility is
  required to be maintained within product stream (SLE15).
- Dropped all following patches which are now part of upstream xfsprogs,
  and were previously backported to address bugs bsc#1167206,
  bsc#1167205, bsc#1158630, bsc#1158509, bsc#1158504, bsc#1158758,
  bsc#1129859, bsc#1122271, bsc#1073421, bsc#1119063, bsc#1105068.
  make_xfs_scrub_interp_explicit.patch
  xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch
  xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch
  xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch
  xfsprogs-xfs_repair-allow-in-attribute-names.patch
  xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch
  xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  xfsprogs-xfs_db-add-a-superblock-info-command.patch
  xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  xfsprogs-xfs_quota-fix-false-error-reporting-of-project-inher.patch
  xfsprogs-xfs-create-structure-verifier-function-for-shortform.patch
  xfsprogs-xfs-create-structure-verifier-function-for-short-for.patch
  xfsprogs-xfs-refactor-short-form-directory-structure-verifier.patch
  xfsprogs-xfs-provide-a-centralized-method-for-verifying-inlin.patch
  xfsprogs-xfs_repair-don-t-fail-directory-repairs-when-grabbin.patch
  xfsprogs-xfs_repair-implement-custom-ifork-verifiers.patch
  xfsprogs-xfs_repair-use-custom-ifork-verifier-in-mv_orphanage.patch
  xfsprogs-xfs-move-inode-extent-size-hint-validation-to-libxfs.patch
  xfsprogs-xfs_repair-use-libxfs-extsize-cowextsize-validation-.patch
  xfsprogs-mkfs-validate-extent-size-hint-parameters.patch
  xfsprogs-xfs_io-Make-copy_range-arguments-understand-iB-values.patch
  xfsprogs-man-document-some-missing-xfs_db-commands.patch
  xfsprogs-man-reformat-xfs_quota-commands-in-the-manpage-for-t.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629633600">- update to v5.13.0:
  - mkfs: validate rtextsz hint when rtinherit is set
  - xfs_repair: invalidate dirhash when junking dirent
  - xfs_repair: validate inherited rtextsz hint alignmt
  - xfs_quota: allow truncate of grp &amp; prj quota files
  - xfs_io: allow callers to dump fs stats individually
  - xfs_io: don't count fsmaps before querying fsmaps
  - xfs_io: print header once when dumping fsmap in csv
  - xfs_io: clean up the funshare command a bit
  - xfs_io: fix broken funshare_cmd usage
  - libxfs changes merged from kernel 5.13</changelog>
  <changelog author="ailiop@suse.com" date="1668340800">- mkfs: don't trample the gid set in the protofile (bsc#1205266)
  - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
- mkfs: prevent corruption of passed-in suboption string values
  (bsc#1205377)
  - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
  - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
  - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch</changelog>
  <changelog author="ailiop@suse.com" date="1696939200">- mkfs: enable reflink support by default (jsc#PED-6809)
  - drop xfsprogs-mkfs-disable-reflink-support-by-default.patch
- mkfs: enable bigtime support by default (jsc#PED-6809)
  - add xfsprogs-mkfs-enable-bigtime-by-default.patch</changelog>
  <changelog author="ailiop@suse.com" date="1701777600">- update to v6.5.0 (bsc#1217575, bsc#1217576):
  - libxfs: fix atomic64_t detection on x86_32
  - libxfs: use XFS_IGET_CREATE when creating new files
  - libfrog: fix overly sleep workqueues
  - xfs_db: use directio for device access
  - libxfs: make platform_set_blocksize optional with directio
  - mkfs: add a config file for 6.6 LTS kernels
  - mkfs: enable reverse mapping by default
  - mkfs: enable large extent counts by default
  - xfs_db: create unlinked inodes
  - xfs_db: dump unlinked buckets
  - xfsprogs: don't allow udisks to automount XFS filesystems with no prompt
  - xfs_repair: fix repair failure caused by dirty flag being abnormally set on buffer
- drop:
  - 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch
  - xfsprogs-mkfs-disable-reflink-support-by-default.patch
  - xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch
  - xfsprogs-mkfs-enable-bigtime-by-default.patch
  - xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch
  - xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch
  - xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch
- mkfs: disable inobtcnt and nrext64 features by default
  - add xfsprogs-mkfs-disable-inobtcnt-and-nrext64-features-by-defaul.patch</changelog>
  <changelog author="ailiop@suse.com" date="1708603200">- update to 6.6.0
  - xfs_scrub: add missing license and copyright information
  - xfs_db: report the device associated with each io cursor
  - libxfs: Fix UAF in a requeued EFI
  - xfs_io: Add new option, to exercise log2_data_unit_size in kernel fscrypt_policy_v2
  - xfs_db: Add upport to read from external log device
  - metadump: New metadump format
  - xfs_quota: fix missing mount point warning</changelog>
  <changelog author="ailiop@suse.com" date="1714996800">- update to 6.7.0
  - xfsprogs: Several configure script updates
  - xfs_io: Use system's SEEK_DATA and SEEK_HOLE definition
  - xfsprogs: Remove platform_defs.h generation on build time
  - xfs_db: Fix metadata read error due hardcoded initialization of bb_count
  - xfsprogs: Request 64-bit time_t where possible
  - xfsprogs: Remove use of LFS64 interfaces</changelog>
</package>
<package pkgid="b9a1847e5d665bae872ac8550a81c04cb9f382f7b2261cd6052e0f6ad77e6ac2" name="xom" arch="noarch">
  <version epoch="0" ver="1.3.9" rel="150200.5.3.3"/>
  <changelog author="fstrba@suse.com" date="1692792000">- Initial packaging as standalone package with version 1.3.9</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a4c42eeae6e1ccabd6522e435ad19b5649b49f924dc4c8c0f509bc5cd731911a" name="xom" arch="src">
  <version epoch="0" ver="1.3.9" rel="150200.5.3.3"/>
  <changelog author="fstrba@suse.com" date="1692792000">- Initial packaging as standalone package with version 1.3.9</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
</otherdata>